Fusebox · Fusebox · CVE-2010-5033
**Name of the Vulnerable Software and Affected Versions**
Fusebox version 5.5.1
**Description**
A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the `CatDisplay` parameter in the ProductList.cfm file.
**Recommendations**
For Fusebox version 5.5.1, consider restricting access to the ProductList.cfm file or validating and sanitizing the `CatDisplay` parameter to prevent SQL injection attacks. As a temporary workaround, avoid using the `CatDisplay` parameter in the ProductList.cfm file until a patch is available.