PHP-Fusion versions 6.00.206 and below suffer from SQL injection attacks.
5c759a854ef640ac086d20a4e6915f62b1f78fc833f667effd143990303e0ff0PHP-Fusion version 7.00.1 remote SQL injection exploit that makes use of messages.php.
77817606cf5e9fed61740e8e7fda85ce50b412c3ee6fc324930edec411a37b22The triscoop_race_system module form PHP-Fusion is susceptible to a remote SQL injection vulnerability.
8f523f99b311c69f9e966dc0ef71d07fc6b47c71bf022ac6bbb598c70078cfdaThe recept module form PHP-Fusion is susceptible to a remote SQL injection vulnerability.
97bbc84a1cf5dba9b37320d7930ef5ea52ab7f6b67e4505a37eff15ddcaf18dfThe raidtracker_panel module form PHP-Fusion is susceptible to a remote SQL injection vulnerability.
011dbda72211944d87f6ecd0345b1167d038f75c1c8e573a7d5a33251095c4a0The manuals module form PHP-Fusion is susceptible to a remote SQL injection vulnerability.
851cf76e5ae634292ac9b28e07ad33fabf482a3952f76397006d79684c739208Secunia Security Advisory - boom3rang has discovered a vulnerability in the Recepies (Recept) module for PHP-Fusion, which can be exploited by malicious people to conduct SQL injection attacks.
12779e2aef4ef9e9f46ddfb0c307e70fb8bc16e34ac7c2b104517cf0eb2010d7The PHP-Fusion Freshlinks module suffers from a remote SQL injection vulnerability.
0475c3878933ffe910da8e4da74f233516eeaac0fd62460f27dd85081ed66fafThe PHP-Fusion classifieds module suffers from a remote SQL injection vulnerability.
01257d4d193074b2604955447d4796e629e0fdb1dd80ce3471dc5bee1ec92cddThe PHP-Fusion module Kroax versions 4.42 and below suffer form a SQL injection vulnerability.
03bd4184efa4742d3dc66287e172fc5f1fc5e8ab9eb62b20798f7010a4fc5f13Secunia Security Advisory - Matrix86 has reported two vulnerabilities in the Forum Rank System module for PHP-Fusion, which can be exploited by malicious people to disclose sensitive information.
f4c4af49be7e05282af6208650535cb7992114bfc0f4d90401f562a705be193fThe PHP-Fusion module Forum Rank System version 6 suffers from a local file inclusion vulnerability.
04f76e5ed4a0b2c4528a2f8ed6e2df819f5da6eed04dde13409bfe77d7270540Secunia Security Advisory - The:Paradox has discovered a vulnerability in PHP-Fusion, which can be exploited by malicious users to conduct SQL injection attacks.
fcda1f84a462159530a5230d2620ed3d3ea7e2bc227c17f1b0fe04c870579098PHP-Fusion version 6.00.307 remote blind SQL injection exploit that makes use of submit.php.
6134178aeb7b56660fa59a9fcbec796d8152026eafa4b0fac5f93fb4731b5cdcPHP-Fusion module Expanded Calendar 2.x remote SQL injection exploit.
786a41f0f5e5ab6c2ba13842380a45c90b058300a2358b55583a20d9338486afSecunia Security Advisory - nights_shadow has discovered a vulnerability in PHP-Fusion, which can be exploited by malicious people to conduct cross-site scripting attacks.
2f2c72bc84aa0fbc3e2fc6725c4791e054a04cac9ff744a0beb2a2e4c517552bSecunia Security Advisory - UniquE-Key has discovered a vulnerability in the Expanded Calendar module for PHP-Fusion, which can be exploited by malicious people to conduct SQL injection attacks.
b961d3ca491e63b16a2a8d8e874ec89dc213880a45366fc85e2fcaead5caf59eThe PHP-Fusion Calendar_Panel module suffers from a remote SQL injection vulnerability in show_event.php.
79ea46463221b9e0d1c36d3f074964b87a0d4475a456140e1265183688fb9a26PHP-Fusion module Arcade version 1.0 suffers from a remote SQL injection vulnerability.
09c2a92d7326bbade70922ec3e5ad35f2f0e4c1fa770836afb0dadfce655546fSecunia Security Advisory - A vulnerability has been reported in PHP-Fusion, which can be exploited by malicious people to conduct SQL injection attacks.
f6c92b7d7a1f0943ff19cb296c0afb08a881f027dc19689b46e764a3cb6f0e40PHPFusion versions 6.01.4 and below extract()/_SERVER[REMOTE_ADDR] SQL injection exploit.
dd4b190a2ba9b3f73a1c5ef44f3f21d6efc7482616bbf953a0a1726dae42e586Using a known flaw with execution in Internet Explorer, you can upload a malicious GIF file to PHP-Fusion to conduct cross site scripting attacks.
f0c86eb0daf30a8a7894f46d7680d8ba088f2c38084a21e8d09b3c1f1cc8810bSecunia Security Advisory - ZeberuS and Redworm have reported a vulnerability in PHP-Fusion, which can be exploited by malicious people to conduct script insertion attacks.
ab4d57df1d545f77deef2675d679ecdbe11513ebd77e33b06ad7126815693067PHP-Fusion versions 6.00.306 and below "srch_where" SQL injection and administrative credential disclosure exploit.
0297d54fa03c13c829d97e23b9597e0a37532a05248e616af080ce1513ebd33fPHPFusion versions 6.00.306 and below avatar mod_mime arbitrary file upload and local inclusion exploit.
5e61c05f77a12f36d67b4c5a761b9f9ce21eb52a10a73d49a779f85c63d866fcSecunia Security Advisory - rgod has reported some vulnerabilities in PHP-Fusion, which can be exploited by malicious users to compromise a vulnerable system.
461569f59a70e256058edef4cacfaf42597e22744dfb67550b6493cfb60b75f4
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed