812 matches found
CVE-2005-0692
Cross-site scripting XSS vulnerability in fusioncore.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript...
CVE-2005-0692
PHP-Fusion 5.x is affected by CVE-2005-0692 due to an XSS vulnerability in fusion_core.php. An attacker can inject arbitrary web script or HTML via a message containing an IMG BBCode that carries character-encoded Javascript, which will execute in the victim’s browser when the malicious BBCode is...
PHP-Fusion 5.0 - BBCode IMG Tag Script Injection
PHP-Fusion 5.0 - BBCode IMG Tag Script Injection source: https://www.securityfocus.com/bid/12751/info PHP-Fusion is reported prone to a script injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input prior to including it in dynamically...
PHP-Fusion < 5.01 BBcode IMG Tag XSS
Binary data 2682.prm...
PHP-Fusion 5.0 - BBCode IMG Tag Script Injection
source: https://www.securityfocus.com/bid/12751/info PHP-Fusion is reported prone to a script injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input prior to including it in dynamically generated content. An attacker can supply ASCII...
CVE-2005-0692
Cross-site scripting XSS vulnerability in fusioncore.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript...
CVE-2004-1723
The CVE-2004-1723 issue affects PHP-Fusion 4.00, specifically the updateuser.php and forums_prune.php scripts. A remote attacker can trigger a direct HTTP request that reveals the installation path in an error message, leading to sensitive information disclosure. The provided sources confirm the ...
CVE-2004-1723
The 1 updateuser.php and 2 forumsprune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message...
CVE-2004-1724
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusionadmin/dbbackups directory to world read/write/execute 777, which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator userna...
CVE-2004-1724
CVE-2004-1724 affects PHP-Fusion 4.0 where the ReadMe First.txt instructs setting fusion_admin/db_backups to 777. This world-writable directory enables remote attackers to download or view backups, which have easily guessable filenames and contain administrator usernames and passwords. Root cause...
php-fusion.txt
TheGreatOne2176, Reapercore I have a found an error in php-fusion 4.x where you can view any thread on the forum. In fusionforum/viewthread.php the $GET variables arent properly checked or queried making it possible to view all threads. The example I tested was...
CVE-2005-0345
CVE-2005-0345 affects php-fusion 4.x where viewthread.php does not validate (1) forum_id or (2) forum_cat parameters, enabling remote attackers to view protected forums by supplying a thread_id. Reported impact is partial confidentiality loss; exploitation appears through crafted thread access ra...
CVE-2005-0345
viewthread.php in php-fusion 4.x does not check the 1 forumid or 2 forumcat parameters, which allows remote attackers to view protected forums via the threadid parameter...
PHP-Fusion Detection
The remote host is running PHP-Fusion, a light-weight, open source content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid16335; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
PHP-Fusion < 5.00 viewthread.php Arbitrary Message Thread / Forum Access
A vulnerability exists in the version of PHP-Fusion installed on the remote host that may allow an attacker to read the contents of arbitrary forums and threads, regardless of the attacker's privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
php-fusion 4.x vuln
TheGreatOne2176, Reapercore I have a found an error in php-fusion 4.x where you can view any thread on the forum. In fusionforum/viewthread.php the $GET variables arent properly checked or queried making it possible to view all threads. The example I tested was...
PHP-Fusion viewthread.php Arbitrary Thread Access
Binary data 2598.prm...
PHP-Fusion 4.0 - Viewthread.php Information Disclosure
PHP-Fusion 4.0 - Viewthread.php Information Disclosure source: https://www.securityfocus.com/bid/12482/info PHP-Fusion is reportedly affected by an information disclosure vulnerability. This issue is due to the application failing to properly sanitize user-supplied input. It is reported that an...
PHP-Fusion 4.0 - 'Viewthread.php' Information Disclosure
source: https://www.securityfocus.com/bid/12482/info PHP-Fusion is reportedly affected by an information disclosure vulnerability. This issue is due to the application failing to properly sanitize user-supplied input. It is reported that an attacker could leverage this vulnerability to view any...
[SA14090] PHP-Fusion "forum_search.php" Information Disclosure
TITLE: PHP-Fusion "forumsearch.php" Information Disclosure SECUNIA ADVISORY ID: SA14090 VERIFY ADVISORY: http://secunia.com/advisories/14090/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: PHP-Fusion 4.x http://secunia.com/product/3803/ DESCRIPTION:...