← Back

Php Fusion

php_fusion

85 CVEs • 11 products

Products (11)

Click to collapse
Toggle
Php Fusion
php_fusion
62 CVEs
Phpfusion
phpfusion
13 CVEs
Expanded Calendar Module
expanded_calendar_module
2 CVEs
Arcade Module
arcade_module
1 CVE
Forum Rank System
forum_rank_system
1 CVE
World Of Warcraft Tracker Infusion Module
world_of_warcraft_tracker_infusion_module
1 CVE
Recepies Module
recepies_module
1 CVE
Freshlinks Module
freshlinks_module
1 CVE
The Kroax Module
the_kroax_module
1 CVE
Team Impact Ti Blog System Module
team_impact_ti_blog_system_module
1 CVE
Members Cv Module
members_cv_module
1 CVE

CVEs (85)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-0692
1Php Fusion
1Php Fusion
Apr 16, 2026
Mar 6, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript.
CVE-2004-2438
1Php Fusion
1Php Fusion
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field.
CVE-2004-2437
1Php Fusion
1Php Fusion
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php.
CVE-2004-1723
1Php Fusion
1Php Fusion
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message.
CVE-2004-1724
1Php Fusion
1Php Fusion
Apr 16, 2026
Aug 18, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database ba...Show more
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password.Show less