CVE-2005-4005

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srchtext parameter in a Search and Sort option to messages.php...

CVE-2005-3157

CVE-2005-3157 describes an SQL injection in PHP-Fusion 6.00.109 caused by unsafely handling the msg_send parameter in messages.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, with a likely impact on confidentiality, integrity, and availability as defined by the C...

PHP-Fusion 6.00.109 (msg_send) SQL Injection Exploit

No description provided by source. php if magicquotes off - SQL Injection, poc: http://target/pathtoPhpFusion/messages.php?msgsend=' UNION SELECT userpassword FROM fusionusers WHERE username='adminusername'/ inserted the above for a better description /str0ke 19.17 28/09/2005 -- PhpF600109xpl.php...