CVE-2005-4655

CVE-2005-4655 refers to a cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.204, specifically in submit.php where the news_body parameter accepts input that can be crafted with nested HTML tags (for example "<meta" or "<sc[removed]ript>") to inject arbitrary script or HTML. The ...

CVE-2005-4655

Cross-site scripting XSS vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the newsbody parameter, as demonstrated by elements such as "ta" and "ript"...

CVE-2005-4655: Undefined Security Weakness

Cross-site scripting XSS vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the newsbody parameter, as demonstrated by elements such as " ta" and " ript"...

CVE-2005-4655

Cross-site scripting XSS vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the newsbody parameter, as demonstrated by elements such as "ta" and "ript"...

CVE-2005-4517

SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratingsinclude.php...

CVE-2005-4516

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

CVE-2005-4516

CVE-2005-4516 describes multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300. The issue allows remote attackers to inject arbitrary web script or HTML via (1) the sortby parameter in members.php and (2) IMG tags. Affected software is PHP-Fusion’s 6.00.200–6....

CVE-2005-4517

CVE-2005-4517 concerns a SQL injection vulnerability in PHP-Fusion versions 6.00.200 through 6.00.300. The flaw allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts (e.g., ratings_include.php). The vulnerability is exploitable through standard we...

CVE-2005-4516

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

CVE-2005-4517

SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratingsinclude.php...

CVE-2005-4516: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

CVE-2005-4517: Undefined Security Weakness

SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratingsinclude.php...

PHP-Fusion 6.00.3 (rating) Parameter Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= PHP-Fusion 6.00.3 rating Parameter Remote SQL Injection Exploit ================================================================= !/usr/bin/perl Exploit for PHP-Fusion 6.00....

PHP-Fusion 6.00.3 (rating) Parameter Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Exploit for PHP-Fusion 6.00.3 Released Coded by:[email protected] Greetz: http://www.curityreason.com use strict; use warnings; use LWP::UserAgent; use HTTP::Cookies; if!$ARGV3 printEOF; Exploit for PHP-Fusion 6.00.3 Released Coded by krasza...

PHP-Fusion 6.00.3 - rating SQL Injection

PHP-Fusion 6.00.3 - rating SQL Injection !/usr/bin/perl Exploit for PHP-Fusion 6.00.3 Released Coded by:[email protected] Greetz: http://www.curityreason.com use strict; use warnings; use LWP::UserAgent; use HTTP::Cookies; if!$ARGV3 printagent"Exploit for PHP-Fusion" . $ua-agent; $ua-cookiej...

PHP-Fusion 6.00.3 - 'rating' SQL Injection

!/usr/bin/perl Exploit for PHP-Fusion 6.00.3 Released Coded by:[email protected] Greetz: http://www.curityreason.com use strict; use warnings; use LWP::UserAgent; use HTTP::Cookies; if!$ARGV3 printagent"Exploit for PHP-Fusion" . $ua-agent; $ua-cookiejar HTTP::Cookies-new 'file' =...

XSS&Sql injection attack in PHP-Fusion 6.00.3 Released

XSS&Sql injection attack in PHP-Fusion 6.00.3 Released Web page:http://www.php-fusion.co.uk/ Author:[email protected] 1.Description ..."PHP-Fusion is a constantly evolving content management system CMS powered by PHP 4 and mySQL. It provides an easy to install system with a simple yet powerf...

PHP-Fusion 6.0 - members.php Cross-Site Scripting

PHP-Fusion 6.0 - members.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15931/info PHP-Fusion is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...

PHP-Fusion 6.0 - 'members.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15931/info PHP-Fusion is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

CVE-2005-4005

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srchtext parameter in a Search and Sort option to messages.php...