VYPR
Unrated severityNVD Advisory· Published Oct 6, 2005· Updated Apr 16, 2026

CVE-2005-3161

CVE-2005-3161

Description

Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php.

Affected products

10
  • cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*
    • cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.