← Database

CVE-2005-1596

CRITICAL CVSS: 10.0 Published: 2005-05-16 Modified: 2026-06-16

Description

index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.

Affected Platforms

Fusion Sbx

Weakness Type

NVD-CWE-Other

References