CVE-2005-3161

Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via 1 the activate parameter in register.php and 2 the catid parameter in faq.php...

CVE-2005-3158

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands via the 1 pmemailnotify and 2 pmsavesent parameters, a different vulnerability than CVE-2005-3157 and CVE-2005-3159...

CVE-2005-3159

SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msgview parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158...

CVE-2005-3157

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msgsend parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159...

CVE-2005-3158

PHP-Fusion

CVE-2005-3161

Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via 1 the activate parameter in register.php and 2 the catid parameter in faq.php...

CVE-2005-3158

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands via the 1 pmemailnotify and 2 pmsavesent parameters, a different vulnerability than CVE-2005-3157 and CVE-2005-3159...

CVE-2005-3159

SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msgview parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158...

CVE-2005-3160

Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the 1 album and 2 photo parameters...

CVE-2005-3161

PHP-Fusion

CVE-2005-3159

CVE-2005-3159 is a SQL injection vulnerability in PHP-Fusion, specifically in messages.php where the msg_view parameter can be exploited to execute arbitrary SQL. It is described as a different vulnerability from CVE-2005-3157 and CVE-2005-3158, and is rated HIGH (CVSS v2 base score 7.5) with net...

CVE-2005-3157

CVE-2005-3157 describes an SQL injection in PHP-Fusion 6.00.109 caused by unsafely handling the msg_send parameter in messages.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, with a likely impact on confidentiality, integrity, and availability as defined by the C...

CVE-2005-3160

PHP-Fusion

CVE-2005-3157

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msgsend parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159...

[Full-disclosure] Secunia Research: PHP-Fusion Two SQL Injection Vulnerabilities

====================================================================== Secunia Research 06/10/2005 - PHP-Fusion Two SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...

Fusionv-6.00.109.txt

PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure site: http://www.php-fusion.co.uk - if magicquotes off - SQL Injection, poc: http://target/pathtoPhpFusion/messages.php?msgsend=' UNION SELECT userpassword FROM fusionusers WHERE username='adminusername'/ now hash is showed i...

PHP-Fusion SQL injection and exploit

Critical Security research: http://www.critical.lt Original Advisory may be found: http://www.critical.lt/?vulnerabilities/73 Vulnerable product: PHP-Fusion = v6.00.109 Vulnerability type: SQL Injection Risk: Highly critical Developer's site: http://www.php-fusion.co.uk About: PHP-Fusion, a...

phpfusion600109.txt

PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure site: http://www.php-fusion.co.uk - if magicquotes off - SQL Injection, poc: http://target/pathtoPhpFusion/messages.php?msgsend=' UNION SELECT userpassword FROM fusionusers WHERE username='adminusername'/ now hash is showed i...

PHP-Fusion < 6.00.110 Multiple SQL Injection Vulnerabilities

Binary data 3245.prm...

PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure

PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure site: http://www.php-fusion.co.uk - if magicquotes off - SQL Injection, poc: http://target/pathtoPhpFusion/messages.php?msgsend=' UNION SELECT userpassword FROM fusionusers WHERE username='adminusername'/ now hash is showed i...