PHP-Fusion 6.00.3 (rating) Parameter Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= PHP-Fusion 6.00.3 rating Parameter Remote SQL Injection Exploit ================================================================= !/usr/bin/perl Exploit for PHP-Fusion 6.00....

PHP-Fusion 6.00.3 - 'rating' SQL Injection

!/usr/bin/perl Exploit for PHP-Fusion 6.00.3 Released Coded by:[email protected] Greetz: http://www.curityreason.com use strict; use warnings; use LWP::UserAgent; use HTTP::Cookies; if!$ARGV3 printagent"Exploit for PHP-Fusion" . $ua-agent; $ua-cookiejar HTTP::Cookies-new 'file' =...

PHP-Fusion 6.0 - members.php Cross-Site Scripting

PHP-Fusion 6.0 - members.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15931/info PHP-Fusion is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...

PHP-Fusion 6.0 - 'members.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15931/info PHP-Fusion is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

CVE-2005-4005

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srchtext parameter in a Search and Sort option to messages.php...

CVE-2005-4005

CVE-2005-4005 affects PHP-Fusion 6.00.109: SQL injection in messages.php via the srch_text parameter in the Search and Sort option, allowing a remote attacker to obtain path information and potentially execute arbitrary SQL commands. No remediation details are provided in the supplied documents; ...

CVE-2005-4005

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srchtext parameter in a Search and Sort option to messages.php...

PHP-Fusion v6.00.109 SQL Injection and Info. Disclosure

In the latest version of PHP-Fusion, the content management system by Digitanium php-fusion.co.uk, there is an SQL Error in messages.php that reveals path names and a table name, and someone could possibly manipulate the SQL database. The error is as follows, it is with the Search and Sort option...

PHP-Fusion 6.0.109 - messages.php SQL Injection

PHP-Fusion 6.0.109 - messages.php SQL Injection source: https://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHP-Fusion 6.0.109 - 'messages.php' SQL Injection

source: https://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CVE-2005-3740

Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter to options.php or 2 lastvisited parameter to viewforum.php...

CVE-2005-3739

Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors...

CVE-2005-3739

Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors...

CVE-2005-3740

PHP-Fusion

CVE-2005-3739

The vulnerability (CVE-2005-3739) affects PHP-Fusion 6.00.206 and earlier, with the flaw in subheader.php enabling remote attackers to obtain the full path via unspecified vectors. The provided sources do not specify exploit details, affected versions beyond those, or concrete remediation steps. ...

[SA17664] PHP-Fusion SQL Injection Vulnerabilities

TITLE: PHP-Fusion SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17664 VERIFY ADVISORY: http://secunia.com/advisories/17664/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291...

phpFusion600206.txt

PHP-Fusion Date: Nov. 16 2005 Vendor: http://sourceforge.net/projects/php-fusion/ Description: "...a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration system. PHP-Fusion...

PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection

PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection source: https://www.securityfocus.com/bid/15502/info PHP-Fusion is prone to SQL injection vulnerabilities in multiple PHP scripts. These issues are due to a failure in the application to properly sanitize user-supplied input before...

PHP-Fusion 4.0/5.0/6.0 - 'options.php?/ viewforum.php' SQL Injection

source: https://www.securityfocus.com/bid/15502/info PHP-Fusion is prone to SQL injection vulnerabilities in multiple PHP scripts. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in...

PHP-Fusion homepage address XSS

A vulnerability exists in the remote version of PHP-Fusion that may allow an attacker to execute arbitrary HTML and script code in the context of the user SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...