CVE-2006-0593

Published: Feb 8, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php.

Affected (18)

Products: Php Fusion: Php Fusion

Php Fusion

1 product

Php Fusion

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Php Fusion Php Fusion	Version 6.00.100
Php Fusion Php Fusion	Version 6.00.101
Php Fusion Php Fusion	Version 6.00.102
Php Fusion Php Fusion	Version 6.00.103
Php Fusion Php Fusion	Version 6.00.104
Php Fusion Php Fusion	Version 6.00.105
Php Fusion Php Fusion	Version 6.00.106
Php Fusion Php Fusion	Version 6.00.107
Php Fusion Php Fusion	Version 6.00.108
Php Fusion Php Fusion	Version 6.00.109
Php Fusion Php Fusion	Version 6.00.110
Php Fusion Php Fusion	Version 6.00.200
Php Fusion Php Fusion	Version 6.00.204
Php Fusion Php Fusion	Version 6.00.205
Php Fusion Php Fusion	Version 6.00.206
Php Fusion Php Fusion	Version 6.00.207
Php Fusion Php Fusion	Version 6.00.300
Php Fusion Php Fusion	Version 6.00.303