9641 matches found
CVE-2006-2330
PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, a...
CVE-2006-2330
CVE-2006-2330 affects PHP-Fusion 6.00.306 and earlier running on Apache 1.3.27 with PHP 4.3.3. The vulnerability arises in the file-upload validation logic, where a filename containing two or more extensions ending with an assumed-valid extension (e.g., .gif) can bypass validation. An authenticat...
CVE-2006-2331
Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via 1 a .. dot dot in the settingslocale parameter in infusions/lastseenuserspanel/lastseenuserspanel.php, and 2 a .. dot dot in the localeset parameter in...
PHP-Fusion < 6.00.307 Local File Inclusion
Binary data 3560.prm...
PHP-Fusion 6.00.306 - Multiple Vulnerabilities
!/usr/bin/php -q -d shortopentag=on ? echo "PHPFusion = v6.00.306 avatar modmime arbitrary file upload &\r\n"; echo "local inclusion vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if $argc6 echo "Usage: php ".$argv0." host path us...
PHP-Fusion 6.00.306 - Multiple Vulnerabilities
PHP-Fusion 6.00.306 - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on ? echo "PHPFusion = v6.00.306 avatar modmime arbitrary file upload &\r\n"; echo "local inclusion vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if...
PHP-Fusion <= 6.00.306 Multiple Vulnerabilities Exploit
Exploit for unknown platform in category web applications ======================================================= PHP-Fusion = 6.00.306 Multiple Vulnerabilities Exploit ======================================================= !/usr/bin/php -q -d shortopentag=on ? echo "PHPFusion = v6.00.306 avatar...
PHP-Fusion <= 6.00.306 Multiple Vulnerabilities Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHPFusion = v6.00.306 avatar modmime arbitrary file upload &\r\n"; echo "local inclusion vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if $argc6 echo...
PHP-Fusion < 6.00.110 Multiple SQLi Vulnerabilities
PHP-Fusion is prone to multiple SQL injection SQLi vulnerabilities due to its failure to properly sanitize certain parameters. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
[SA18949] PHP-Fusion Cross-Site Scripting Vulnerabilities
TITLE: PHP-Fusion Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA18949 VERIFY ADVISORY: http://secunia.com/advisories/18949/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Unknown WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291/ PHP-Fusion 5.x...
CVE-2006-0593
Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...
Cross site scripting
Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...
CVE-2006-0593
PHP-Fusion contains a cross-site scripting (XSS) vulnerability (CVE-2006-0593) in version prior to 6.00.304. The flaw allows remote attackers to inject arbitrary web script or HTML through two fields: shout_name in shoutbox_panel.php and comments in comments_include.php. Impact per the sources is...
CVE-2006-0593
Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...
CVE-2005-4655
Cross-site scripting XSS vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the newsbody parameter, as demonstrated by elements such as "ta" and "ript"...
CVE-2005-4655
CVE-2005-4655 refers to a cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.204, specifically in submit.php where the news_body parameter accepts input that can be crafted with nested HTML tags (for example "<meta" or "<sc[removed]ript>") to inject arbitrary script or HTML. The ...
CVE-2005-4655
Cross-site scripting XSS vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the newsbody parameter, as demonstrated by elements such as "ta" and "ript"...
CVE-2005-4517
SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratingsinclude.php...
CVE-2005-4516
Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...
CVE-2005-4516
CVE-2005-4516 describes multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300. The issue allows remote attackers to inject arbitrary web script or HTML via (1) the sortby parameter in members.php and (2) IMG tags. Affected software is PHP-Fusion’s 6.00.200–6....