CVE-2005-3159: SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different…

PriorityP337high7.5CVSS 2.0

AVNACLAuNCPIPAP

EXPLOIT

EPSS

1.16%

63.3th percentile

SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
php-fusion	php-fusion	—	—
php-fusion	php-fusion	—	—
php_fusion	php_fusion	—	—
php_fusion	php_fusion	—	—
php_fusion	php_fusion	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.