Vulnerability in PHP Fusion

CVE-2005-0829

Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pass parameters.

EPSS: 0.017 (74.6th percentile) — read the EPSS interpretation.

Affected products

References