ID de Prueba:	1.3.6.1.4.1.25623.1.0.20009
Categoría:	Web application abuses
Título:	PHP-Fusion < 6.00.110 Multiple SQLi Vulnerabilities
Resumen:	PHP-Fusion is prone to multiple SQL injection (SQLi); vulnerabilities due to its failure to properly sanitize certain parameters.
Descripción:	Summary: PHP-Fusion is prone to multiple SQL injection (SQLi) vulnerabilities due to its failure to properly sanitize certain parameters. Vulnerability Impact: Provided PHP's 'magic_quotes_gpc' setting is disabled, these flaws allow an attacker to manipulate database queries, which may result in the disclosure or modification of data. Solution: Update to version 6.00.110 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3157 Bugtraq: 20050928 PHP-Fusion v6.00.109 SQL Injection / admin|users credentials (Google Search) http://marc.info/?l=bugtraq&m=112793982604963&w=2 http://rgod.altervista.org/phpfusion600109.html http://secunia.com/advisories/16994 Common Vulnerability Exposure (CVE) ID: CVE-2005-3158 Bugtraq: 20050929 Re: PHP-Fusion v6.00.109 SQL Injection / admin|users credentials (Google Search) http://marc.info/?l=bugtraq&m=112801702000944&w=2 http://www.gnucitizen.org/writings/php-fusion-messages.php-sql-injection-vulnerability.xhtml Common Vulnerability Exposure (CVE) ID: CVE-2005-3160 http://www.osvdb.org/19841 http://secunia.com/advisories/17048 Common Vulnerability Exposure (CVE) ID: CVE-2005-3161 BugTraq ID: 15018 http://www.securityfocus.com/bid/15018 http://secunia.com/secunia_research/2005-52/advisory/ http://www.osvdb.org/19866 http://www.osvdb.org/19867 http://secunia.com/advisories/17055 http://securityreason.com/securityalert/54 XForce ISS Database: phpfusion-faq-register-sql-injection(22532) https://exchange.xforce.ibmcloud.com/vulnerabilities/22532
Copyright	Copyright (C) 2005 Josh Zlatin-Amishav

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.