CVE-2007-3559: Undefined Security Weakness

Cross-site scripting XSS vulnerability in infusions/shoutboxpanel/shoutboxpanel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled, allows remote authenticated users to inject arbitrary web script or HTML via the URI, related to the FUSIONQUERY constant...

CVE-2007-1980

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1980

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1980

The CVE-2007-1980 vulnerability affects the Topliste 1.0 module for PHP-Fusion, specifically in index.php. It is a SQL injection flaw exploitable via the cid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD CVSS v2 base score is 7.5 (HIGH) with network access, low a...

CVE-2007-1980

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

Sql injection

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

CVE-2007-1978

CVE-2007-1978 : SQL injection in the Arcade 1.00 module for PHP-Fusion (index.php, view_game_list action) allows remote attackers to inject arbitrary SQL via the cid parameter. Root cause is unsanitized input leading to database query manipulation. Documents do not provide explicit patch version ...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

CVE-2007-1980: Undefined Security Weakness

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1978: Undefined Security Weakness

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

PHP-FUSION topliste Module (cid) Remote SQL Injection Vuln

-------------------------------- PHP-FUSION topliste Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron - unique xoron.biz -------------------------------- Exploit:...

PHP-FUSION Arcade Module (cid) Remote SQL Injection Vuln

-------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit: index.php?op=viewgamelist&cid=-1//union//select//null,username,userpassword,null,null,null//from//fusionusers/...

Sql injection

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

CVE-2007-1845

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

CVE-2007-1845

The CVE-2007-1845 entry discusses a SQL injection in the PHP-Fusion Expanded Calendar (calendar_panel) 2.00 module, exploitable via the m_month parameter in show_event.php. The root cause is unauthenticated input (m_month) being used to construct SQL, allowing remote attackers to alter queries an...

CVE-2007-1845

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

PHP-Fusion Module Arcade 1.0 (cid) Remote SQL Injection Vulnerability

No description provided by source. -------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit:...