Summary
The remote host is running Fusion SBX, a guest book written in PHP.
A vulnerability in the remote version of this software allows remote attackers to modify the product's settings without knowing the administrator password, in addition by injecting arbitrary PHP code to one of the board's settings a remote attacker is able to cause the program to execute arbitrary code.
Solution
None at this time
Severity
Classification
-
CVE CVE-2005-1596 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities