Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown
CVE-2008-5946
Disclosure Date: January 22, 2009 (last updated October 04, 2023)
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
0
Attacker Value
Unknown
CVE-2005-2783
Disclosure Date: September 02, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags.
0
Attacker Value
Unknown
CVE-2005-2401
Disclosure Date: July 27, 2005 (last updated February 22, 2025)
PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.
0
Attacker Value
Unknown
CVE-2005-0345
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter.
0
Attacker Value
Unknown
CVE-2004-2438
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field.
0
Attacker Value
Unknown
CVE-2004-1723
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2004-2437
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php.
0
Attacker Value
Unknown
CVE-2004-1724
Disclosure Date: August 18, 2004 (last updated February 22, 2025)
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password.
0
