TI-2020-19243 CVE-2020-37108 · GHSA-6rvh-46hg-f8gvPhpIX 2012 Professional - 'id' SQL InjectionPriority MEDIUM 64PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows remote attackers to manipulate database queries.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00323 · Published 2026-02-03 · No fix listed CWE-89