CVE-2020-23184

A stored cross site scripting XSS vulnerability in /administration/settingsregistration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Registration" field...

CVE-2019-12099

In PHP-Fusion 9.03.00, editprofile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/formfileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload...

EUVD-2004-2429

Malware in sbrugna...

EUVD-2005-2076

Malware in sbrugna...

EUVD-2005-0346

Malware in sbrugna...

EUVD-2005-3736

Malware in sbrugna...

EUVD-2020-9401

Malware in sbrugna...

EUVD-2021-26515

Malware in sbrugna...

EUVD-2005-0693

Malware in sbrugna...

EUVD-2008-6810

Malware in sbrugna...

EUVD-2020-9402

Malware in sbrugna...

EUVD-2020-15935

Malware in sbrugna...

EUVD-2020-15932

Malware in sbrugna...

EUVD-2005-2402

Malware in sbrugna...

EUVD-2005-2077

Malware in sbrugna...

CVE-2021-3172

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature...

CVE-2020-23658

PHP-Fusion 9.03.60 is affected by Cross Site Scripting XSS via infusions/memberpollpanel/polladmin.php...

CVE-2020-12718

In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulnerability in the Preview Comment feature. The protection mechanism can be bypassed by using HTML event handlers such as ontoggle...

CVE-2021-3172

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature...

Php-Fusion Injection Vulnerability

Php-fusion PHP-Fusion is an open source lightweight content management system based on MySql and PHP from Malaysia's PHP-Fusion Php-fusion. The system contains modules for news, articles and forums. PHP-Fusion suffers from an injection vulnerability that stems from a flaw in a component in...