CVE-2005-1596: Fusion Sbx

High severity, CVSS 10.0. EPSS: 7% chance of exploitation in the next 30 days.

index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.

Affected products

• Fusion Sbx: up to and including 1.2

Published 2005-05-16. Last modified 2026-06-16.