php fusion php fusion 6.00.3 vulnerabilities and exploits

(subscribe to this query)

PHP-Fusion 6.00.306 and previous versions, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which...

Php Fusion Php Fusion 6.00.110 Php Fusion Php Fusion 6.00.204 Php Fusion Php Fusion 6.00.107 Php Fusion Php Fusion 6.00.109 Php Fusion Php Fusion 6.00.206 Php Fusion Php Fusion 6.00.3 Php Fusion Php Fusion 6.00.303 Php Fusion Php Fusion 6.00.105 Php Fusion Php Fusion 6.00.106 Php Fusion Php Fusion 6.00.304 Php Fusion Php Fusion 6.00.306

1 EDB exploit

Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote malicious users to include and execute arbitrary local files via (1) a .. (dot dot) in the settings[locale] parameter in infusions/last_seen_users_panel/last_seen_users_panel.php, and (2) a .. (dot d...

Php Fusion Php Fusion 6.00.106 Php Fusion Php Fusion 6.00.107 Php Fusion Php Fusion 6.00.304 Php Fusion Php Fusion 6.00.306 Php Fusion Php Fusion 6.00.105 Php Fusion Php Fusion 6.00.3 Php Fusion Php Fusion 6.00.303 Php Fusion Php Fusion 6.00.109 Php Fusion Php Fusion 6.00.110 Php Fusion Php Fusion 6.00.204 Php Fusion Php Fusion 6.00.206

1 EDB exploit

SQL injection vulnerability in PHP-Fusion 6.00.200 up to and including 6.00.300 allows remote malicious users to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratings_include.php.

Php Fusion Php Fusion 6.00.200 Php Fusion Php Fusion 6.00.206 Php Fusion Php Fusion 6.00.207 Php Fusion Php Fusion 6.00.300

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion prior to 6.01.3 allow remote malicious users to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension, an...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook