7.5
CVE-2005-4005
- EPSS 1.28%
- Veröffentlicht 05.12.2005 01:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:02
- Erkennungen
LoginSQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php Fusion ≫ Php Fusion Version 6.00.109
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.28% | 0.663 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/17871
http://securityreason.com/securityalert/31
http://www.osvdb.org/21415
http://www.securityfocus.com/archive/1/418512
http://www.securityfocus.com/bid/15698
http://www.vupen.com/english/advisories/2005/2730