CVE-2008-5074: PHP-Fusion Freshlinks Module

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter.

Affected products

• PHP-Fusion Freshlinks Module: version 1.0 only

Published 2008-11-14. Last modified 2026-06-16.