PHP-Fusion 7.02.05 - Multiple Vulnerabilities

PHP-Fusion 7.02.05 - Multiple Vulnerabilities waraxe-2013-SA097 - Multiple Vulnerabilities in PHP-Fusion 7.02.05 =============================================================================== Author: Janek Vind "waraxe" Date: 27. February 2013 Location: Estonia, Tartu Web:...

PHP-Fusion 7.02.05 XSS / LFI / SQL Injection

waraxe-2013-SA097 - Multiple Vulnerabilities in PHP-Fusion 7.02.05 =============================================================================== Author: Janek Vind "waraxe" Date: 27. February 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-97.html Description of vulnerable...

PHP-Fusion 7.02.05 - Multiple Vulnerabilities

waraxe-2013-SA097 - Multiple Vulnerabilities in PHP-Fusion 7.02.05 =============================================================================== Author: Janek Vind "waraxe" Date: 27. February 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-97.html Description of vulnerable...

PHP-Fusion 7.02.05 SQL Injection

SQL Injection vulnerability exists in releases since 7.02.01 till 7.02.05 of PHP-Fusion CMS. The vulnerability allows the attacker to authenticate as an arbitrary user and act with its rights which might lead to the code execution. Because of exploitation simplicity, the potential risk is very...

PHP-Fusion CMS 7.02.05 SQL Injection Vulnerability

PHP-Fusion CMS versions 7.02.01 through 7.02.05 suffer from a remote SQL injection vulnerability. SQL Injection vulnerability exists in releases since 7.02.01 till 7.02.05 of PHP-Fusion CMS. The vulnerability allows the attacker to authenticate as an arbitrary user and act with its rights which...

PHP-Fusion CMS 7.02.05 SQL Injection

SQL Injection vulnerability exists in releases since 7.02.01 till 7.02.05 of PHP-Fusion CMS. The vulnerability allows the attacker to authenticate as an arbitrary user and act with its rights which might lead to the code execution. Because of exploitation simplicity, the potential risk is very...

PHP-Fusion 'cat-id' XSS Vulnerability

PHP-Fusion is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2012-6043

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2012-6043

CVE-2012-6043 describes a cross-site scripting (XSS) vulnerability in PHP-Fusion 7.02.04. The flaw resides in downloads.php, where the cat_id parameter can be exploited to inject arbitrary web script or HTML. Affected software/changelog details: PHP-Fusion 7.02.04; vulnerability type: XSS; vector...

CVE-2012-6043

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

Advanced MP3 Player Infusion 2.01 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

PHP-Fusion Advanced MP3 Player Infusion - upload.php Arbitrary File Upload

PHP-Fusion Advanced MP3 Player Infusion - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54228/info PHP-Fusion Advanced MP3 Player Infusion is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to...

PHP-Fusion Advanced MP3 Player Infusion - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54228/info PHP-Fusion Advanced MP3 Player Infusion is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerabilit...

PHP-Fusion Addons - Advanced MP3 Player Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

PHP-Fusion 7.2.4 - weblink_id SQL Injection

PHP-Fusion 7.2.4 - weblinkid SQL Injection source: https://www.securityfocus.com/bid/51865/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

PHP-Fusion 7.02.04 SQL Injection

Exploit Title : PHP-Fusion Sql Injection Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : www.php-fusion.co.uk Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Powered by PHP-Fusion"...

PHP-Fusion 7.2.4 - 'weblink_id' SQL Injection

source: https://www.securityfocus.com/bid/51865/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

PHP-Fusion 7.02.04 Cross Site Scripting

ISlamic Republic Of IRan Security Team http://irist.ir/forum/ PHP-Fusion V.7.02.04 Cross-Site Scripting Vulnerabilities Download......: http://www.php-fusion.co.uk/ Exploit.......: http://www.site.com/path/downloads.php?catid=Xss Google Search.: "Powered by PHP-Fusion" Bug Found.....: IrIsT.Ir...

PHP-Fusion 7.2.4 - downloads.php Cross-Site Scripting

PHP-Fusion 7.2.4 - downloads.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51365/info PHP-Fusion is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may levera...