CVE-2005-1972

CVE-2005-1972 describes multiple SQL injection vulnerabilities in InteractivePHP FusionBB 0.11 Beta and earlier. The flaws allow remote attackers to execute arbitrary SQL via (1) the username field processed by insertUser, and (2) the bb_session_id value stored in a cookie. The affected component...

CVE-2005-1971

The CVE-2005-1971 issue concerns InteractivePHP FusionBB 0.11 Beta and earlier, where a directory traversal flaw in the language parameter allows remote attackers to include arbitrary local files by supplying ".." sequences. The underlying cause is improper validation of file paths, enabling pote...