PHP-Fusion 9.03.00 - 'Edit Profile' Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "PHP-Fusion %q This module exploits command execution vulnerability in PHP-Fusion 9.03.00 and prior versions. It is possible to execute commands i...

CVE-2015-8375

Cross-site scripting XSS vulnerability in PHP-Fusion 9...

Cross site scripting

Cross-site scripting XSS vulnerability in PHP-Fusion 9...

CVE-2015-8375

CVE-2015-8375 is a cross-site scripting (XSS) vulnerability affecting PHP-Fusion 9. OpenVAS describes PHPFusion

CVE-2015-8375

Cross-site scripting XSS vulnerability in PHP-Fusion 9...

PHP-Fusion 'administration/robots.php' HTML Injection Vulnerability

PHP-Fusion is an open source lightweight content management system based on MySql and PHP. An HTML injection vulnerability exists in PHP-Fusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

PHP-Fusion 7.02.07 Blind SQL Injection

============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...

PHP-Fusion 7.02.07 - Blind SQL Injection

PHP-Fusion 7.02.07 - Blind SQL Injection ============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score...

PHP-Fusion 7.02.07 Blind SQL Injection Vulnerability

PHP-Fusion versions 7.02.07 and below suffer from a remote blind SQL injection vulnerability in the admin panel. ============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas -...

PHP-Fusion 7.02.07 - Blind SQL Injection

============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...

PHP Fusion 7.02.07 XSS / Clickjacking

Hi Team, Affected Vendor: https://www.php-fusion.co.uk/home.php Date: 04/05/2015 Creditee: http://osvdb.org/creditees/13518-vadodil-joel-varghese Type of vulnerability: Persistent XSS + Clickjacking Tested on: Windows 8.1 Product: PHP Fusion Version: 7.02.07 1 Cross Site Scripting...

PHP-Fusion 7.02.07 /administration/submissions.php SQL注入漏洞

/administration/submissions.phpif isset$GET'action' && $GET'action' == "2" && isset$GET't' && $GET't' == "n" if isset$POST'publish' && isset$GET'submitid' && isnum$GET'submitid' $result = dbquery"SELECT ts., tu.userid, tu.username FROM ".DBSUBMISSIONS." ts LEFT JOIN ".DBUSERS." tu ON...

PHP-Fusion Multiple SQL Injections (CVE-2014-8596)

SQL injection vulnerability has been reported in PHP-Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-8596

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the 1 submitid parameter in a 2 action to files/administration/submissions.php or 2 status parameter to files/administration/members.php...

Sql injection

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the 1 submitid parameter in a 2 action to files/administration/submissions.php or 2 status parameter to files/administration/members.php...

CVE-2014-8596

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the 1 submitid parameter in a 2 action to files/administration/submissions.php or 2 status parameter to files/administration/members.php...

CVE-2014-8596

PHP-Fusion 7.02.07 is affected by multiple SQL injection vulnerabilities. The flaws allow remote authenticated users to execute arbitrary SQL via (1) the submit_id parameter in files/administration/submissions.php (action=2) and (2) the status parameter in files/administration/members.php. The ro...

PHP-Fusion 7.02.07 - SQL Injection

No description provided by source. Exploit Title: PHP-Fusion 7.02.07 SQL Injection Date: 06/11/2014 Exploit Author: Mauricio Correa Vendor Homepage: www.php-fusion.co.uk Software Link: http://ufpr.dl.sourceforge.net/project/php-fusion/PHP-Fusion%20Archives/7.x/ PHP-Fusion-7.02.07.zip Version:...

PHP-Fusion 7.02.07 SQL Injection

Exploit Title: PHP-Fusion 7.02.07 SQL Injection Date: 06/11/2014 Exploit Author: Mauricio Correa Vendor Homepage: www.php-fusion.co.uk Software Link: http://ufpr.dl.sourceforge.net/project/php-fusion/PHP-Fusion%20Archives/7.x/ PHP-Fusion-7.02.07.zip Version: 7.02.07 Tested on: Linux OS Debian CVE...

PHP-Fusion 7.02.07 - SQL Injection

PHP-Fusion 7.02.07 - SQL Injection Exploit Title: PHP-Fusion 7.02.07 SQL Injection Date: 06/11/2014 Exploit Author: Mauricio Correa Vendor Homepage: www.php-fusion.co.uk Software Link: http://ufpr.dl.sourceforge.net/project/php-fusion/PHP-Fusion%20Archives/7.x/ PHP-Fusion-7.02.07.zip Version:...