CVE-2005-4005

Description

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php.

References

http://www.vupen.com/english/advisories/2005/2730

http://www.securityfocus.com/archive/1/418512

http://www.osvdb.org/21415

http://securityreason.com/securityalert/31

http://secunia.com/advisories/17871

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3