CVE-2005-2075
PHP-Fusion 5.0 and 6.0 - Unprotected Database File Exposure via Predictable Filename
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-2075. PoCs published by Easyex.
AI-analyzed exploit summary This Perl script exploits an information leakage vulnerability in PHP-Fusion versions 6.00.105 and below by brute-forcing database backup filenames to download them. It targets known backup directories and iterates through possible filenames to retrieve sensitive database information.
Description
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/db_backups directory in PHP-Fusion 6.0 or the fusion_admin/db_backups directory in 5.0.
Exploits (1)
This Perl script exploits an information leakage vulnerability in PHP-Fusion versions 6.00.105 and below by brute-forcing database backup filenames to download them. It targets known backup directories and iterates through possible filenames to retrieve sensitive database information.