EDB-7173

functional

PHP-Fusion 7.00.1 - 'messages.php' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor irk4zpublished 2008-11-20catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-5335USmedium6.8Exploit
SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the s…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan