CVE:CVE-2014-3757
CNNVD:CNNVD-201405-284
PhpManufaktur kitForm是德国PhpManufaktur公司的一套客户关系管理系统（CRM）和内容管理系统（CMS）。
KeepInTouch (KIT)模块的phpManufaktur kitForm扩展0.43及之前版本的sorter.php脚本存在SQL注入漏洞。远程攻击者可借助‘sorter_value’参数利用该漏洞执行任意SQL命令。
solution:Upgrade phpmanufaktur kitform to a higher version than 0.43,0.10,0.11,0.12,0.13,0.14,0.15,0.16,0.17,0.18,0.19,0.20,0.21,0.22,0.23,0.24,0.25,0.26,0.27,0.28,0.29,0.30,0.31,0.32,0.33,0.34,0.35,0.36,0.37,0.38,0.39,0.40,0.41,0.42,and avoid the version (,0.43],0.10,0.11,0.12,0.13,0.14,0.15,0.16,0.17,0.18,0.19,0.20,0.21,0.22,0.23,0.24,0.25,0.26,0.27,0.28,0.29,0.30,0.31,0.32,0.33,0.34,0.35,0.36,0.37,0.38,0.39,0.40,0.41,0.42