php-fusion Vulnerability Advisory Catalog

Total 57 security vulnerabilities recorded for php-fusion software and firmware.

← Back to All Vendors
CVE-2008-5197 UNKNOWN
Component: php-fusion

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a deta...

📅 2008-11-21
CVSS 7.5 Dossier →
CVE-2008-5196 UNKNOWN
Component: php-fusion

SQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary ...

📅 2008-11-21
CVSS 7.5 Dossier →
CVE-2008-5074 UNKNOWN
Component: freshlinks_module

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via...

📅 2008-11-14
CVSS 7.5 Dossier →
CVE-2008-4527 UNKNOWN
Component: recepies_module

SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands...

📅 2008-10-09
CVSS 7.5 Dossier →
CVE-2008-4521 UNKNOWN
Component: world_of_warcraft_tracker_infusion_module

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) module 2.0 for PHP-Fusion allows rem...

📅 2008-10-09
CVSS 7.5 Dossier →
CVE-2008-2227 UNKNOWN
Component: forum_rank_system

Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and execute arbitrary local files via...

📅 2008-05-14
CVSS 6.8 Dossier →
CVE-2008-1918 UNKNOWN
Component: php-fusion

SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the database table prefix is known...

📅 2008-04-23
CVSS 6.0 Dossier →
CVE-2007-5187 UNKNOWN
Component: expanded_calendar_module

SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attack...

📅 2007-10-03
CVSS 7.5 Dossier →
CVE-2007-3559 UNKNOWN
Component: php-fusion

Cross-site scripting (XSS) vulnerability in infusions/shoutbox_panel/shoutbox_panel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled...

📅 2007-07-04
CVSS 3.5 Dossier →
Page 3 of 3 (57 Total Records)