Vulnerabilities (CVE)

Filtered by vendor Fusion Subscribe
Filtered by product Sbx
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-1596 1 Fusion 1 Sbx 2017-07-11 10.0 HIGH N/A
index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.