812 matches found
PT-2005-3016 · Php Fusion · Php-Fusion
Name of the Vulnerable Software and Affected Versions: PHP-Fusion version 6.0.105 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a news or article post. The vulnerability possibly involves the news body, article description, or...
PT-2005-3017 · Php Fusion · Php-Fusion
Name of the Vulnerable Software and Affected Versions: PHP-Fusion versions 5.0 through 6.0 Description: The issue allows remote attackers to obtain sensitive information via a direct request to a predictable filename in the administration/db backups directory in PHP-Fusion 6.0 or the fusion...
[SA15830] PHP-Fusion Two Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
PHP-Fusion < 6.00.106 submit.php Multiple Parameter HTML Injection
Binary data 3037.prm...
fusionDB.pl.txt
!/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex Database backup vuln in v6.00.105 and below Description: When a ...
PHP-Fusion <= 6.00.105 Accessible Database Backups Download Exploit
Exploit for unknown platform in category web applications =================================================================== PHP-Fusion = 6.00.105 Accessible Database Backups Download Exploit =================================================================== !/usr/bin/perl D A R K A S S A S S I...
PHP-Fusion <= 6.00.105 Accessible Database Backups Download Exploit
No description provided by source. !/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex Database backup vuln in...
PHP-Fusion 6.00.105 - Accessible Database Backups Download
PHP-Fusion 6.00.105 - Accessible Database Backups Download !/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex...
CVE-2005-0345
viewthread.php in php-fusion 4.x does not check the 1 forumid or 2 forumcat parameters, which allows remote attackers to view protected forums via the threadid parameter...
CVE-2005-0829
Cross-site scripting XSS vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the 1 username or 2 userpass parameters...
CVE-2005-0829
Cross-site scripting XSS vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the 1 username or 2 userpass parameters...
CVE-2005-0829
The CVE-2005-0829 entry concerns a Cross-site scripting (XSS) vulnerability in the Digitanium addon to PHP-Fusion 5.01, specifically in setuser.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the user_name or user_pass parameters. Based on the provided do...
phpFusion501.txt
Note added to this advisory - This is not part of PHP Fusion v5.01 This is an available mod addon supplied by the main developer Digitanium for an IIS Compatibility. This setuser.php will not implemented into PHP Fusion until v5.02 and is not mainstream accross the fusion community. I have notifi...
PHP-Fusion < 5.0.2 setuser.php HTML Injection Vulnerability
Binary data 2726.prm...
[PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
PersianHacker.NET 200503-10PHP-Fusion v5.01 Html Injection Vulnerability Date: 2005 March Bug Number: 10 PHP-Fusion a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration...
PHP-Fusion 45 - Setuser.php HTML Injection
PHP-Fusion 45 - Setuser.php HTML Injection source: https://www.securityfocus.com/bid/12853/info PHP-Fusion is reportedly affected by a HTML injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'setuser.php' script before usin...
PHP-Fusion 4/5 - 'Setuser.php' HTML Injection
source: https://www.securityfocus.com/bid/12853/info PHP-Fusion is reportedly affected by a HTML injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'setuser.php' script before using it in dynamically generated content. This...
phpfusionXSS.txt
I found an exploit in the current version of php-fusion which allows you to input XSS in the IMG tag. I reported it already to php-fusion and they created a fix for this. Here it goes: By converting the text ie. javascript:alert'test' to their ascii values, the strings between the img/img tags...
PHP-FUSION 5.* XSS VULNERABILITY
I found an exploit in the current version of php-fusion which allows you to input XSS in the IMG tag. I reported it already to php-fusion and they created a fix for this. Here it goes: By converting the text ie. javascript:alert'test' to their ascii values, the strings between the img/img tags...
PHP-Fusion BBCode IMG Tag XSS
The remote host is running a version of PHP-Fusion that does not sufficiently sanitize JavaScript code. Specifically, an attacker can inject JavaScript code that bypasses the filters in 'fusioncore.php' by HTML-encoding it. This code will then be executed in the context of a user's browser when...