PHP-Fusion Forum_Search.PHP Information Disclosure Vulnerability

Bugtraq ID:	12425
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Feb 02 2005 12:00AM
Updated:	Feb 02 2005 12:00AM
Credit:	Discovery of this vulnerability is credited to TheGreatOne2176, ReaperCore.
Vulnerable:	PHP-Fusion PHP-Fusion 4.0 1 PHP-Fusion PHP-Fusion 4.00
Not Vulnerable:

PHP-Fusion Forum_Search.PHP Information Disclosure Vulnerability

PHP-Fusion is affected by an information disclosure vulnerability. This issue is due to the application failing to properly handle user-supplied input used in an SQL query.

This issue was reported to affect PHP-Fusion 4.01; earlier versions may also be vulnerable.

PHP-Fusion Forum_Search.PHP Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHP-Fusion Forum_Search.PHP Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHP-Fusion Forum_Search.PHP Information Disclosure Vulnerability

References:

• PHP-Fusion Homepage (PHP-Fusion)