CVE-2005-1596

CRITICAL 10.0CVE-2005-1596 · Published 16/05/2005 · updated 16/06/2026

In short

CVE-2005-1596 is a CRITICAL (CVSS 10.0) vulnerability affecting sbx (fusion).
Chance of exploitation in the next 30 days (EPSS): 7.0%, higher than 94.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sbx fusion	`≤ 1.2`	No fix yet

Description

index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.

References

secunia.com/advisories/15257 · Patch
exploits.co.in/Article1134.html · Exploit
osvdb.org/16216 · Vendor Advisory
osvdb.org/16217 · Vendor Advisory
securiteam.com/exploits/5OP042KFPU.html · Exploit
vupen.com/english/advisories/2005/0508
exchange.xforce.ibmcloud.com/vulnerabilities/20531

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free