CVE:CVE-2012-1124
CNNVD:CNNVD-202002-478
phxEventManager 2.0 beta 5版本中的search.php文件存在SQL注入漏洞。远程攻击者可借助'search_terms'参数利用该漏洞执行任意SQL命令。
solution:Upgrade phxeventmanager_project phxeventmanager to a higher version than 2.0:beta5,and avoid the version 2.0:beta5