Description
Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.osvdb.org/19867 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22532 ↗
- http://www.osvdb.org/19866 ↗
- http://www.securityfocus.com/bid/15018 ↗
- http://secunia.com/secunia_research/2005-52/advisory/ ↗
- http://www.php-fusion.co.uk/news.php?readmore=261 ↗
- http://securityreason.com/securityalert/54 ↗
- http://secunia.com/advisories/17055 ↗