812 matches found
PHP-Fusion 6.00.306 - Multiple Vulnerabilities
PHP-Fusion 6.00.306 - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on ? echo "PHPFusion = v6.00.306 avatar modmime arbitrary file upload &\r\n"; echo "local inclusion vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if...
PHP-Fusion 6.00.306 - Multiple Vulnerabilities
!/usr/bin/php -q -d shortopentag=on ? echo "PHPFusion = v6.00.306 avatar modmime arbitrary file upload &\r\n"; echo "local inclusion vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if $argc6 echo "Usage: php ".$argv0." host path us...
PHP-Fusion < 6.00.110 Multiple SQLi Vulnerabilities
PHP-Fusion is prone to multiple SQL injection SQLi vulnerabilities due to its failure to properly sanitize certain parameters. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
[SA18949] PHP-Fusion Cross-Site Scripting Vulnerabilities
TITLE: PHP-Fusion Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA18949 VERIFY ADVISORY: http://secunia.com/advisories/18949/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Unknown WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291/ PHP-Fusion 5.x...
Cross site scripting
Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...
CVE-2006-0593
Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...
CVE-2006-0593
PHP-Fusion contains a cross-site scripting (XSS) vulnerability (CVE-2006-0593) in version prior to 6.00.304. The flaw allows remote attackers to inject arbitrary web script or HTML through two fields: shout_name in shoutbox_panel.php and comments in comments_include.php. Impact per the sources is...
CVE-2006-0593
Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...
CVE-2005-4655
CVE-2005-4655 refers to a cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.204, specifically in submit.php where the news_body parameter accepts input that can be crafted with nested HTML tags (for example "<meta" or "<sc[removed]ript>") to inject arbitrary script or HTML. The ...
CVE-2005-4655
Cross-site scripting XSS vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the newsbody parameter, as demonstrated by elements such as "ta" and "ript"...
CVE-2005-4655
Cross-site scripting XSS vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the newsbody parameter, as demonstrated by elements such as "ta" and "ript"...
CVE-2005-4516
Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...
CVE-2005-4517
SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratingsinclude.php...
CVE-2005-4516
Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...
CVE-2005-4517
SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratingsinclude.php...
CVE-2005-4517
CVE-2005-4517 concerns a SQL injection vulnerability in PHP-Fusion versions 6.00.200 through 6.00.300. The flaw allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts (e.g., ratings_include.php). The vulnerability is exploitable through standard we...
CVE-2005-4516
CVE-2005-4516 describes multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300. The issue allows remote attackers to inject arbitrary web script or HTML via (1) the sortby parameter in members.php and (2) IMG tags. Affected software is PHP-Fusion’s 6.00.200–6....
PHP-Fusion 6.00.3 (rating) Parameter Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Exploit for PHP-Fusion 6.00.3 Released Coded by:[email protected] Greetz: http://www.curityreason.com use strict; use warnings; use LWP::UserAgent; use HTTP::Cookies; if!$ARGV3 printEOF; Exploit for PHP-Fusion 6.00.3 Released Coded by krasza...
PHP-Fusion 6.00.3 - rating SQL Injection
PHP-Fusion 6.00.3 - rating SQL Injection !/usr/bin/perl Exploit for PHP-Fusion 6.00.3 Released Coded by:[email protected] Greetz: http://www.curityreason.com use strict; use warnings; use LWP::UserAgent; use HTTP::Cookies; if!$ARGV3 printagent"Exploit for PHP-Fusion" . $ua-agent; $ua-cookiej...
XSS&Sql injection attack in PHP-Fusion 6.00.3 Released
XSS&Sql injection attack in PHP-Fusion 6.00.3 Released Web page:http://www.php-fusion.co.uk/ Author:[email protected] 1.Description ..."PHP-Fusion is a constantly evolving content management system CMS powered by PHP 4 and mySQL. It provides an easy to install system with a simple yet powerf...