CVE-2005-3161

Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*
cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*

History

21 Nov 2024, 00:01

Type Values Removed Values Added
References () http://secunia.com/advisories/17055 - Patch, Vendor Advisory () http://secunia.com/advisories/17055 - Patch, Vendor Advisory
References () http://secunia.com/secunia_research/2005-52/advisory/ - Vendor Advisory () http://secunia.com/secunia_research/2005-52/advisory/ - Vendor Advisory
References () http://securityreason.com/securityalert/54 - () http://securityreason.com/securityalert/54 -
References () http://www.osvdb.org/19866 - () http://www.osvdb.org/19866 -
References () http://www.osvdb.org/19867 - () http://www.osvdb.org/19867 -
References () http://www.php-fusion.co.uk/news.php?readmore=261 - Patch, Vendor Advisory () http://www.php-fusion.co.uk/news.php?readmore=261 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/15018 - Patch () http://www.securityfocus.com/bid/15018 - Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/22532 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/22532 -

Information

Published : 2005-10-06 10:02

Updated : 2025-04-03 01:03


NVD link : CVE-2005-3161

Mitre link : CVE-2005-3161

CVE.ORG link : CVE-2005-3161


JSON object : View

Products Affected

php_fusion

  • php_fusion