9640 matches found
CVE-2005-3739
Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors...
CVE-2005-3740
PHP-Fusion
CVE-2005-3739
The vulnerability (CVE-2005-3739) affects PHP-Fusion 6.00.206 and earlier, with the flaw in subheader.php enabling remote attackers to obtain the full path via unspecified vectors. The provided sources do not specify exploit details, affected versions beyond those, or concrete remediation steps. ...
[SA17664] PHP-Fusion SQL Injection Vulnerabilities
TITLE: PHP-Fusion SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17664 VERIFY ADVISORY: http://secunia.com/advisories/17664/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291...
phpFusion600206.txt
PHP-Fusion Date: Nov. 16 2005 Vendor: http://sourceforge.net/projects/php-fusion/ Description: "...a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration system. PHP-Fusion...
PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection
PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection source: https://www.securityfocus.com/bid/15502/info PHP-Fusion is prone to SQL injection vulnerabilities in multiple PHP scripts. These issues are due to a failure in the application to properly sanitize user-supplied input before...
PHP-Fusion 4.0/5.0/6.0 - 'options.php?/ viewforum.php' SQL Injection
source: https://www.securityfocus.com/bid/15502/info PHP-Fusion is prone to SQL injection vulnerabilities in multiple PHP scripts. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in...
PHP-Fusion homepage address XSS
A vulnerability exists in the remote version of PHP-Fusion that may allow an attacker to execute arbitrary HTML and script code in the context of the user SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
PHP-Fusion <= 4.0.1 'members.php' SQLi Vulnerability
A vulnerability exists in PHP-Fusion that may allow an attacker to inject arbitrary SQL code and possibly execute arbitrary code, due to improper validation of user supplied input in the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced source...
Fusion SBX Password Bypass and Command Execution
The remote host is running Fusion SBX, a guest book written in PHP. A vulnerability in the remote version of this software allows remote attackers to modify the product SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...
Possible Bug in PHP-Fusion 6.0.204
There is a Bug in The News-System: Post something like: memetata http-equiv = "refresh" content = "1; URL = http://www.google.com" and you'll be redirected to google. Possible Solution: use a recursive function to filter metatags...
PHP-Fusion < 6.00.205 HTML Injection
Binary data 3267.prm...
[SA17312] PHP-Fusion "news_body" Script Insertion Vulnerability
TITLE: PHP-Fusion "newsbody" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17312 VERIFY ADVISORY: http://secunia.com/advisories/17312/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291/ DESCRIPTION: peanu...
PHP-Fusion < 6.00.110 Multiple Scripts SQL Injection
The remote version of this software is vulnerable to multiple SQL injection attacks due to its failure to properly sanitize certain parameters. Provided PHP's 'magicquotesgpc' setting is disabled, these flaws allow an attacker to manipulate database queries, which may result in the disclosure or...
CVE-2005-3159
SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msgview parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158...
CVE-2005-3161
Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via 1 the activate parameter in register.php and 2 the catid parameter in faq.php...
CVE-2005-3160
Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the 1 album and 2 photo parameters...
CVE-2005-3157
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msgsend parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159...
CVE-2005-3158
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands via the 1 pmemailnotify and 2 pmsavesent parameters, a different vulnerability than CVE-2005-3157 and CVE-2005-3159...