Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:01
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/17055 - Patch, Vendor Advisory | |
References | () http://secunia.com/secunia_research/2005-52/advisory/ - Vendor Advisory | |
References | () http://securityreason.com/securityalert/54 - | |
References | () http://www.osvdb.org/19866 - | |
References | () http://www.osvdb.org/19867 - | |
References | () http://www.php-fusion.co.uk/news.php?readmore=261 - Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/15018 - Patch | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/22532 - |
Information
Published : 2005-10-06 10:02
Updated : 2025-04-03 01:03
NVD link : CVE-2005-3161
Mitre link : CVE-2005-3161
CVE.ORG link : CVE-2005-3161
JSON object : View
Products Affected
php_fusion
- php_fusion
CWE