Lucene search

[email protected]CVE-2005-3160

HistoryOct 06, 2005 - 10:02 a.m.

CVE-2005-3160

2005-10-0610:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

sql injection

photogallery.php

php-fusion

remote execution

nvd

8.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.2%

JSON

Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the (1) album and (2) photo parameters.

CPENameOperatorVersion
php_fusion:php_fusionphp fusioneq6.00.105
php_fusion:php_fusionphp fusioneq6.00.106
php_fusion:php_fusionphp fusioneq6.00.103
php_fusion:php_fusionphp fusioneq6.00.101
php_fusion:php_fusionphp fusioneq6.00.107
php_fusion:php_fusionphp fusioneq6.00.104
php_fusion:php_fusionphp fusioneq6.00.100
php_fusion:php_fusionphp fusioneq6.00.108
php_fusion:php_fusionphp fusioneq6.00.102
php_fusion:php_fusionphp fusioneq6.00.109

CPE	Name	Operator	Version
php_fusion:php_fusion	php fusion	eq	6.00.105
php_fusion:php_fusion	php fusion	eq	6.00.106
php_fusion:php_fusion	php fusion	eq	6.00.103
php_fusion:php_fusion	php fusion	eq	6.00.101
php_fusion:php_fusion	php fusion	eq	6.00.107
php_fusion:php_fusion	php fusion	eq	6.00.104
php_fusion:php_fusion	php fusion	eq	6.00.100
php_fusion:php_fusion	php fusion	eq	6.00.108
php_fusion:php_fusion	php fusion	eq	6.00.102
php_fusion:php_fusion	php fusion	eq	6.00.109

References

secunia.com/advisories/17048

www.osvdb.org/19841

8.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.2%

JSON

Related for CVE-2005-3160

cve1 openvas1 nessus1