4.3
CVSSv2

CVE-2005-2783

Published: 02/09/2005 Updated: 11/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and previous versions allows remote malicious users to inject arbitrary web script or HTML via nested, malformed URL BBCode tags.

Vulnerable Product Search on Vulmon Subscribe to Product

php fusion php fusion 6.0.105

php fusion php fusion 6.0.106

php fusion php fusion 6.0.107

php fusion php fusion 4.00

php fusion php fusion 4.01

php fusion php fusion 5.0

php fusion php fusion 5.01_service_pack

Exploits

source: wwwsecurityfocuscom/bid/14688/info PHP-Fusion is prone to a script injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected si ...