Security Advisory

CVE-2013-7375

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-05-05 17:00:00

Last updated 2024-08-06 18:09:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie, a different vulnerability than CVE-2013-1803.

← Browse all CVEs View on cve.org ↗