ID de Prueba:	1.3.6.1.4.1.25623.1.0.803431
Categoría:	Web application abuses
Título:	PHP-Fusion Multiple Vulnerabilities
Resumen:	PHP-Fusion is prone to multiple vulnerabilities.
Descripción:	Summary: PHP-Fusion is prone to multiple vulnerabilities. Vulnerability Insight: Please see the references for more information on the vulnerabilities. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site and manipulate SQL queries by injecting arbitrary SQL code or disclose or manipulation of arbitrary data. Affected Software/OS: PHP-Fusion Version 7.02.05 and prior versions may also be affected Solution: Upgrade to PHP-Fusion Version 7.02.06 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1803 http://seclists.org/fulldisclosure/2013/Feb/154 http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html http://www.waraxe.us/advisory-97.html http://www.openwall.com/lists/oss-security/2013/03/03/2 http://www.openwall.com/lists/oss-security/2013/03/03/1 http://osvdb.org/90693 http://osvdb.org/90695 http://osvdb.org/90709 http://osvdb.org/90710 http://osvdb.org/90711 http://osvdb.org/90712 http://osvdb.org/90713 http://osvdb.org/show/osvdb/90714 http://secunia.com/advisories/52403 Common Vulnerability Exposure (CVE) ID: CVE-2013-1804 http://osvdb.org/90707 http://osvdb.org/90708 Common Vulnerability Exposure (CVE) ID: CVE-2013-1805 Common Vulnerability Exposure (CVE) ID: CVE-2013-1806 http://www.osvdb.org/90692 http://www.osvdb.org/90694 http://www.osvdb.org/90696 Common Vulnerability Exposure (CVE) ID: CVE-2013-1807 http://www.osvdb.org/90691 Common Vulnerability Exposure (CVE) ID: CVE-2013-7375 BugTraq ID: 58011 http://www.securityfocus.com/bid/58011 Bugtraq: 20130216 PHP-Fusion 7.02.05 SQL Injection (Google Search) http://seclists.org/bugtraq/2013/Feb/80 http://packetstormsecurity.com/files/120368/PHP-Fusion-CMS-7.02.05-SQL-Injection.html https://vndh.net/note:php-fusion-70205-sql-injection http://osvdb.org/show/osvdb/90359
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.