Security Advisory
CVE-2020-37108
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information.