VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 29, 2005· Updated Jun 16, 2026

CVE-2005-2075

CVE-2005-2075

Description

PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/db_backups directory in PHP-Fusion 6.0 or the fusion_admin/db_backups directory in 5.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • PHP-Fusion/Phpfusion3 versions
    cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.0:*:*:*:*:*:*:*
    • (no CPE)range: 5.0, 6.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.