PHP-Fusion 7.02.07 - SQL Injection Vulnerability

PHP-Fusion version 7.02.07 suffers from a remote SQL injection vulnerability. Exploit Title: PHP-Fusion 7.02.07 SQL Injection Date: 06/11/2014 Exploit Author: Mauricio Correa Vendor Homepage: www.php-fusion.co.uk Software Link:...

PHP-Fusion 7.02.07 - SQL Injection

Exploit Title: PHP-Fusion 7.02.07 SQL Injection Date: 06/11/2014 Exploit Author: Mauricio Correa Vendor Homepage: www.php-fusion.co.uk Software Link: http://ufpr.dl.sourceforge.net/project/php-fusion/PHP-Fusion%20Archives/7.x/ PHP-Fusion-7.02.07.zip Version: 7.02.07 Tested on: Linux OS Debian CVE...

Auto Database System 1.0 Infusion Addon SQL injection Vulnerability

No description provided by source. Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=146 Version: Auto Database System 1.0 Infusion, PHP-fusion 7.01..03 Test...

PHP-Fusion 6.0.109 Messages.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

eXtreme-fusion 4.02 Fusion_Forum_View.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21621/info eXtreme-fusion is prone to a local file-include vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execu...

PHP-Fusion 4.01 - SQL Injection Vulnerability

No description provided by source. Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities Date: 17/05/2010 Author: Ma3sTr0-Dz Software Link: http://www.php-fusion.co.uk Version: 4.01 CVE : N/A Code : exploit code =======================================================PHP-Fusion v4.01 SQL...

PHP-Fusion 6.0 Members.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15931/info PHP-Fusion is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

PHP-Fusion 4/5 Setuser.PHP HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12853/info PHP-Fusion is reportedly affected by a HTML injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'setuser.php' script before using it in...

Download Management 1.00 for PHP-Fusion Multiple Local File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27618/info Download Management for PHP-Fusion is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an attacker to access...

PHP-Fusion Teams Structure Infusion Addon SQL Injection

No description provided by source. Exploit Title: PHP-fusion Team Structure Infusion All versions SQL injection Date: 16-1-2010 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=120 Version: PHP-fusion 7.01..03, TeamStructure Infusionall versions...

PHP-Fusion <= 6.00.306 (srch_where) SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHP-Fusion = v6.00.306 \srchwhere\ SQL Injection/Admin credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; if $argc5 echo Usage: php .$argv0. host path use...

PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection Vulnerability

No description provided by source. PHP-Fusion Mod Members Bewerb Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

PHP-Fusion MG User-Fotoalbum SQL Injection Vulnerability

No description provided by source. ----------------------------Information------------------------------------------------ +Name : PHP-Fusion mg user fotoalbum 1.0.1 = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 10.10.2010 +Script : PHP-Fusion mg user fotoalbum 1.0.1...

PHP-Fusion <= 6.00.105 Accessible Database Backups Download Exploit

No description provided by source. !/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex Database backup vuln in...

PHP-Fusion 6.0.x News.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19908/info PHP-Fusion is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

PHP-Fusion 5.0 BBCode IMG Tag Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12751/info PHP-Fusion is reported prone to a script injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input prior to including it in dynamically generated content. An...

PHP-Fusion 6.1.18 Multiple Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/36171/info PHP-Fusion is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to harvest sensitive information that may lead to further attacks. The following example URIs are...

PHP-Fusion Mod triscoop_race_system (raceid) SQL Injection Vuln

No description provided by source. PHP-Fusion Mod triscoopracesystem raceid Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++ Author : boom3rang webpage : www.khg-crew.ws greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - -=Kosova Hackers Group-= ++++++++++++++++++++++++++++ + Dork...

PHP-fusion dsmsf (module downloads) SQL Injection Exploit

No description provided by source. ======================================================== PHP-fusion dsmsf module downloads SQL Inj3ct0r Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

PHP-Fusion 4.0/5.0/6.0 Messages.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14489/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'messages.php' script before using it in an SQL query...