Intrusion PreventionFusion.SBX.Authentication.Bypass
Description
Fusion SBX has an authentication-bypass vulnerability. A remote attacker could bypass security restrictions and execute arbitrary PHP code on the system, via parameters "is_logged" and " maxname2".
Affected Products
Fusion SBX version 1.2 and prior.
Impact
Bypass Security
Recommended Actions
Currently we are not aware of any vendor-supplied patches for this issue.
http://www.fusionphp.net/
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2018-09-26 | 13.458 |
Removed
|
| ID | 13987 |
| Created | Feb 01, 2007 |
| Updated | Apr 23, 2014 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 5.24% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |
| Profile Type | Improper Authentication |