946 matches found
CVE-2005-4005
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srchtext parameter in a Search and Sort option to messages.php...
CVE-2005-4005
CVE-2005-4005 affects PHP-Fusion 6.00.109: SQL injection in messages.php via the srch_text parameter in the Search and Sort option, allowing a remote attacker to obtain path information and potentially execute arbitrary SQL commands. No remediation details are provided in the supplied documents; ...
CVE-2005-4005: Undefined Security Weakness
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srchtext parameter in a Search and Sort option to messages.php...
PHP-Fusion v6.00.109 SQL Injection and Info. Disclosure
In the latest version of PHP-Fusion, the content management system by Digitanium php-fusion.co.uk, there is an SQL Error in messages.php that reveals path names and a table name, and someone could possibly manipulate the SQL database. The error is as follows, it is with the Search and Sort option...
PHP-Fusion 6.0.109 - messages.php SQL Injection
PHP-Fusion 6.0.109 - messages.php SQL Injection source: https://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
PHP-Fusion 6.0.109 - 'messages.php' SQL Injection
source: https://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
CVE-2005-3740
Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter to options.php or 2 lastvisited parameter to viewforum.php...
CVE-2005-3739
Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors...
CVE-2005-3739
The vulnerability (CVE-2005-3739) affects PHP-Fusion 6.00.206 and earlier, with the flaw in subheader.php enabling remote attackers to obtain the full path via unspecified vectors. The provided sources do not specify exploit details, affected versions beyond those, or concrete remediation steps. ...
CVE-2005-3740
PHP-Fusion
CVE-2005-3739
Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors...
CVE-2005-3740: Undefined Security Weakness
Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter to options.php or 2 lastvisited parameter to viewforum.php...
CVE-2005-3739: Undefined Security Weakness
Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors...
[SA17664] PHP-Fusion SQL Injection Vulnerabilities
TITLE: PHP-Fusion SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17664 VERIFY ADVISORY: http://secunia.com/advisories/17664/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291...
phpFusion600206.txt
PHP-Fusion Date: Nov. 16 2005 Vendor: http://sourceforge.net/projects/php-fusion/ Description: "...a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration system. PHP-Fusion...
PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection
PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection source: https://www.securityfocus.com/bid/15502/info PHP-Fusion is prone to SQL injection vulnerabilities in multiple PHP scripts. These issues are due to a failure in the application to properly sanitize user-supplied input before...
PHP-Fusion 4.0/5.0/6.0 - 'options.php?/ viewforum.php' SQL Injection
source: https://www.securityfocus.com/bid/15502/info PHP-Fusion is prone to SQL injection vulnerabilities in multiple PHP scripts. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in...
PHP-Fusion homepage address XSS
A vulnerability exists in the remote version of PHP-Fusion that may allow an attacker to execute arbitrary HTML and script code in the context of the user SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
PHP-Fusion <= 4.0.1 'members.php' SQLi Vulnerability
A vulnerability exists in PHP-Fusion that may allow an attacker to inject arbitrary SQL code and possibly execute arbitrary code, due to improper validation of user supplied input in the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced source...
[SA17312] PHP-Fusion "news_body" Script Insertion Vulnerability
TITLE: PHP-Fusion "newsbody" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17312 VERIFY ADVISORY: http://secunia.com/advisories/17312/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291/ DESCRIPTION: peanu...