Unrated severityNVD Advisory· Published Jun 29, 2005· Updated Apr 16, 2026
CVE-2005-2075
CVE-2005-2075
Description
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/db_backups directory in PHP-Fusion 6.0 or the fusion_admin/db_backups directory in 5.0.
Affected products
2cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:php_fusion:php_fusion:6.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- secunia.com/advisories/15830nvdPatchVendor Advisory
- dark-assassins.com/forum/viewtopic.phpnvdExploitURL Repurposed
- www.vupen.com/english/advisories/2005/0888nvd
News mentions
0No linked articles in our index yet.