CVE-2020-37108: Allhandsmarketing Phpix 2012 Professional

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information.

Affected products

Published 2026-02-03. Last modified 2026-06-17.