Description
Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php.
References
- 19867 vdb-entry
- phpfusion-faq-register-sql-injection(22532) vdb-entry
- 19866 vdb-entry
- 15018 vdb-entry
- http://secunia.com/secunia_research/2005-52/advisory/
- http://www.php-fusion.co.uk/news.php?readmore=261
- 54 third-party-advisory
- 17055 third-party-advisory