CVE-2005-1596

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0320%

EPSS Percentile13.86th

Published2005年5月16日

Last Modified2026年4月16日

Vulnerability Description

index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.

Affected Platforms (CPE)

📦

Fusion

Sbx

<= 1.2

References & Advisories

🔗 http://secunia.com/advisories/15257

🔗 http://www.exploits.co.in/Article1134.html

🔗 http://www.osvdb.org/16216

🔗 http://www.osvdb.org/16217

🔗 http://www.securiteam.com/exploits/5OP042KFPU.html

🔗 http://www.vupen.com/english/advisories/2005/0508

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/20531

🔗 http://secunia.com/advisories/15257

Vulnerability Description

Affected Platforms (CPE)

Sbx

References & Advisories

相关漏洞威胁