Unscored CVE-2004-2437 EUVD-2004-2428GHSA-mj8f-6w6m-h733

SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) …

Published Aug 20, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php.

References

10437 vdb-entry
phpfusion-sql-injection(17546) vdb-entry
11296 vdb-entry
10438 vdb-entry
12686 third-party-advisory