CVE-2013-7375: PHP-Fusion

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie, a different vulnerability than CVE-2013-1803.

Affected products

• PHP-Fusion PHP-Fusion: version 7.02.01 only; version 7.02.02 only; version 7.02.03 only; version 7.02.04 only; version 7.02.05 only

Published 2014-05-05. Last modified 2026-06-17.