CVE-2014-3757

Published: May 15, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (KIT) module allows remote attackers to execute arbitrary SQL commands via the sorter_value parameter.

Affected (34)

Products: Phpmanufaktur: Kitform

Phpmanufaktur

1 product

Kitform

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Phpmanufaktur Kitform	Up to 0.43
Phpmanufaktur Kitform	Version 0.10
Phpmanufaktur Kitform	Version 0.11
Phpmanufaktur Kitform	Version 0.12
Phpmanufaktur Kitform	Version 0.13
Phpmanufaktur Kitform	Version 0.14
Phpmanufaktur Kitform	Version 0.15
Phpmanufaktur Kitform	Version 0.16
Phpmanufaktur Kitform	Version 0.17
Phpmanufaktur Kitform	Version 0.18
Phpmanufaktur Kitform	Version 0.19
Phpmanufaktur Kitform	Version 0.20
Phpmanufaktur Kitform	Version 0.21
Phpmanufaktur Kitform	Version 0.22
Phpmanufaktur Kitform	Version 0.23
Phpmanufaktur Kitform	Version 0.24
Phpmanufaktur Kitform	Version 0.25
Phpmanufaktur Kitform	Version 0.26
Phpmanufaktur Kitform	Version 0.27
Phpmanufaktur Kitform	Version 0.28
Phpmanufaktur Kitform	Version 0.29
Phpmanufaktur Kitform	Version 0.30
Phpmanufaktur Kitform	Version 0.31
Phpmanufaktur Kitform	Version 0.32
Phpmanufaktur Kitform	Version 0.33
Phpmanufaktur Kitform	Version 0.34
Phpmanufaktur Kitform	Version 0.35
Phpmanufaktur Kitform	Version 0.36
Phpmanufaktur Kitform	Version 0.37
Phpmanufaktur Kitform	Version 0.38
Phpmanufaktur Kitform	Version 0.39
Phpmanufaktur Kitform	Version 0.40
Phpmanufaktur Kitform	Version 0.41
Phpmanufaktur Kitform	Version 0.42