Show filters
62 Total Results
Displaying 61-62 of 62
Sort by:
Attacker Value
Unknown
CVE-2004-2437
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php.
0
Attacker Value
Unknown
CVE-2004-1724
Disclosure Date: August 18, 2004 (last updated February 22, 2025)
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password.
0
