CVE-2005-3158

概要

参考情報

• marc.info
• gnucitizen.org/writings/php-fusion-messages.php-sql-injection-vulnerability.xhtml · Exploit

php fusion のその他の脆弱性

• CVE-2006-4673低 2.6Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, whic…
• CVE-2006-3555中 5.8Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web…
• CVE-2006-2459中 6.4SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL co…
• CVE-2006-2331中 6.4Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via …
• CVE-2006-2330中 6.4PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of…