SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Confixx | Swsoft | 3.0.6 (including) | 3.0.6 (including) |
| Confixx | Swsoft | 3.0.8 (including) | 3.0.8 (including) |
| Confixx | Swsoft | 3.1.2 (including) | 3.1.2 (including) |