Fusion SBX Authentication Bypass Vulnerability
BID:13575
Info
Fusion SBX Authentication Bypass Vulnerability
| Bugtraq ID: | 13575 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 10 2005 12:00AM |
| Updated: | May 10 2005 12:00AM |
| Credit: | Discovery is credited to dave. |
| Vulnerable: |
Fusionphp Fusion SBX 1.2 |
| Not Vulnerable: | |
Discussion
Fusion SBX Authentication Bypass Vulnerability
Fusion SBX is prone to a vulnerability that may let remote attackers bypass authentication.
The specific issue is inadequate access validation of user-supplied variables. Once authentication has been bypassed, the attacker may be able to execute arbitrary PHP code.
Fusion SBX is prone to a vulnerability that may let remote attackers bypass authentication.
The specific issue is inadequate access validation of user-supplied variables. Once authentication has been bypassed, the attacker may be able to execute arbitrary PHP code.
Exploit / POC
Fusion SBX Authentication Bypass Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Fusion SBX Authentication Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.