PT-2005-1858 · Php Fusion+1 · Php-Fusion+1

Pi3Ch · Published 2005-03-22 · Updated 2016-10-18 · CVE-2005-0829

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 5.01

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the user name or user pass parameters in the setuser.php file of the Digitanium addon.

Recommendations For PHP-Fusion version 5.01, consider disabling the setuser.php file or restricting access to it until a patch is available. Avoid using the user name and user pass parameters in the affected file until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2005-0829

Affected Products

Digitanium

Php-Fusion

References · 6

• 🔥 https://exploit-db.com/exploits/25241 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0829 · Security Note
• http://marc.info/?l=bugtraq&m=111142918711745&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0829 · Note
• http://marc.info/?l=bugtraq&m=111142752220155&w=2 · Note
• http://marc.info/?l=bugtraq&m=111125692513645&w=2 · Note