Vulnerabilities > CVE-2005-1596 - Unspecified vulnerability in Fusion SBX

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
fusion
NVD
Published: 2005-05-16
Updated: 2024-11-20

Summary

index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.

Vulnerable Configurations

Part Description Count
Application
Fusion
1

References