Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-7375. PoCs published by waraxe.
AI-analyzed exploit summary This advisory details multiple vulnerabilities in PHP-Fusion 7.02.05, including Local File Inclusion (LFI) via insufficient sanitization of user-supplied data in 'maincore.php' and 'administration/user_fields.php', and SQL Injection (SQLi) in 'Authenticate.class.php' and 'downloads.php'. The analysis includes code snippets, attack vectors, and preconditions for exploitation.
Description
SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie, a different vulnerability than CVE-2013-1803.
Exploits (1)
This advisory details multiple vulnerabilities in PHP-Fusion 7.02.05, including Local File Inclusion (LFI) via insufficient sanitization of user-supplied data in 'maincore.php' and 'administration/user_fields.php', and SQL Injection (SQLi) in 'Authenticate.class.php' and 'downloads.php'. The analysis includes code snippets, attack vectors, and preconditions for exploitation.