9379 matches found
PHP-Fusion < 6.00.107 Multiple Vulnerabilities
Binary data 3100.prm...
PHP-Fusion <= 6.00.105 Multiple Vulnerabilities
According to its banner, the remote host is running a version of PHP-Fusion that is affected by multiple vulnerabilities : - An Information Disclosure Vulnerability PHP Fusion stores database backups in a known location within the web server's documents directory. An attacker may be able to...
[EXPL] PHP-Fusion Accessible Database Backups Download (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2005-2075
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/dbbackups directory in PHP-Fusion 6.0 ...
CVE-2005-2075
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/dbbackups directory in PHP-Fusion 6.0 ...
CVE-2005-2074
Cross-site scripting XSS vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the 1 newsbody, 2 articledescription, or 3 articlebody parameters to submit.php...
CVE-2005-2074
CVE-2005-2074 affects PHP-Fusion 6.0.105: a cross-site scripting (XSS) vulnerability in submit.php that can inject arbitrary HTML/Script via the news_body, article_description, or article_body parameters. Exploitation details are documented in connected sources; there is no explicit patched versi...
CVE-2005-2074
Cross-site scripting XSS vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the 1 newsbody, 2 articledescription, or 3 articlebody parameters to submit.php...
CVE-2005-2075
PHP-Fusion versions 5.0–6.0 store database backups in predictable paths under the web root (administration/db_backups in 6.0 or fusion_admin/db_backups in 5.0), enabling remote attackers to disclose sensitive information via direct requests. The vulnerability is categorized as an information disc...
PT-2005-3017 · Php Fusion · Php-Fusion
Name of the Vulnerable Software and Affected Versions: PHP-Fusion versions 5.0 through 6.0 Description: The issue allows remote attackers to obtain sensitive information via a direct request to a predictable filename in the administration/db backups directory in PHP-Fusion 6.0 or the fusion...
PT-2005-3016 · Php Fusion · Php-Fusion
Name of the Vulnerable Software and Affected Versions: PHP-Fusion version 6.0.105 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a news or article post. The vulnerability possibly involves the news body, article description, or...
[SA15830] PHP-Fusion Two Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
PHP-Fusion < 6.00.106 submit.php Multiple Parameter HTML Injection
Binary data 3037.prm...
fusionDB.pl.txt
!/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex Database backup vuln in v6.00.105 and below Description: When a ...
PHP-Fusion <= 6.00.105 Accessible Database Backups Download Exploit
No description provided by source. !/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex Database backup vuln in...
PHP-Fusion 6.00.105 - Accessible Database Backups Download
PHP-Fusion 6.00.105 - Accessible Database Backups Download !/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex...
PHP-Fusion <= 6.00.105 Accessible Database Backups Download Exploit
Exploit for unknown platform in category web applications =================================================================== PHP-Fusion = 6.00.105 Accessible Database Backups Download Exploit =================================================================== !/usr/bin/perl D A R K A S S A S S I...
fusion_v3.6.1_exploit.txt
? $copyr = " !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! oooo...oooo.oooooooo8.ooooooooooo .8888o..88.888........88..888..88 .88.888o88..888oooooo.....888 .88...8888.........888....888 o88o....88.o88oooo888....o888o Network security team nst.void.ru Title: Fusion News v3.6.1...
Fusionphp Fusion News 3.33.6 - X-Forworded-For PHP Script Code Injection
Fusionphp Fusion News 3.33.6 - X-Forworded-For PHP Script Code Injection source: https://www.securityfocus.com/bid/13661/info FusionPHP Fusion News is prone to a remote PHP code injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Th...
Fusionphp Fusion News 3.3/3.6 - X-Forworded-For PHP Script Code Injection
source: https://www.securityfocus.com/bid/13661/info FusionPHP Fusion News is prone to a remote PHP code injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. This may facilitate unauthorized access. ? $copyr = " !!! PRIVATE !!! PRIVA...