Description

SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie, a different vulnerability than CVE-2013-1803.

Remediation

References

CVE-2013-7375

Related Vulnerabilities

WordPress Plugin Filtre de Surveillance Gouvernemental Cross-Site Scripting (1.1)

WordPress Plugin Plug-N-Edit Full Drag & Drop HTML Visual Editor with Web Page Builder WYSIWYG Cross-Site Scripting (5.2.0)

Joomla! Core Security Bypass (1.6.0 - 3.6.5)

WordPress Plugin Bookly #1 WordPress Booking Plugin (Lite Version) Cross-Site Scripting (14.4)

WordPress Plugin YOP Poll Multiple Cross-Site Scripting Vulnerabilities (6.3.0)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2013-7375