Multiple SQL injection vulnerabilities in PHP-Fusion 6.00... · CVE-2005-3740 · GitHub Advisory Database · GitHub

Multiple SQL injection vulnerabilities in PHP-Fusion 6.00...

High severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited parameter to viewforum.php.

References

Published by the National Vulnerability Database

Nov 22, 2005

Published to the GitHub Advisory Database May 1, 2022

Last updated Jan 30, 2023