Browse CVEs

HIGH 7.5 CVE-2007-1978 SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the c… Arcade Module No fix yet Fix from $1,9502007-04-12 HIGH 7.5 CVE-2007-1845 SQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00 module for PHP-Fusion allows remote attackers to execute… Expanded Calendar Module No fix yet Fix from $1,9502007-04-03 MEDIUM 6.4 CVE-2006-2459 SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands vi… Php Fusion No fix yet Fix from $1,6002006-05-19 HIGH 7.5 CVE-2005-4517 SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings paramet… Php Fusion Mitigation only Fix from $1,9502005-12-28 HIGH 7.5 CVE-2005-4005 SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary … Php Fusion No fix yet Fix from $1,9502005-12-05 HIGH 7.5 CVE-2005-3157 SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msg_send paramet… Php Fusion No fix yet Fix from $1,9502005-10-06 HIGH 7.5 CVE-2005-3158 SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands via the (1)… Php Fusion No fix yet Fix from $1,9502005-10-06 HIGH 7.5 CVE-2005-3160 Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the (1) album a… Php Fusion Mitigation only Fix from $1,9502005-10-06 MEDIUM 5.0 CVE-2005-2401 PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag. Php Fusion Mitigation only Fix from $1,6002005-07-27 MEDIUM 5.0 CVE-2005-0345 viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums … Php Fusion Mitigation only Fix from $1,6002005-05-02 HIGH 7.5 CVE-2004-2437 SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php … Php Fusion Mitigation only Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-1723 The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP r… Php Fusion Mitigation only Fix from $1,6002004-12-31 HIGH 7.5 CVE-2004-1724EPSS 7% The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execu… Php Fusion No fix yet Fix from $1,9502004-08-18