CVE-2005-4005

CVE-2005-4005 affects PHP-Fusion 6.00.109: SQL injection in messages.php via the srch_text parameter in the Search and Sort option, allowing a remote attacker to obtain path information and potentially execute arbitrary SQL commands. No remediation details are provided in the supplied documents; ...