New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2005-3157

ExploitedNVDCIRCLENISA

EUVD-2005-3157 · Published Oct 6, 2005

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msg_send parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159.

Technologies

Php_Fusion Php Fusion

Weaknesses

NVD-CWE-Other

CVSS scores

  • v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot