Summary
The remote version of this software is vulnerable to multiple SQL injection attacks due to its failure to properly sanitize certain parameters.
Provided PHP's 'magic_quotes_gpc' setting is disabled, these flaws allow an attacker to manipulate database queries, which may result in the disclosure or modification of data.
Solution
Update to at least version 6.00.110 of PHP-Fusion.
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2005-3157, CVE-2005-3158, CVE-2005-3160, CVE-2005-3161 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities