Skip to content
Noroxi

fusionphp records

4 published records for vendor fusionphp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    4 records
    • CVE-2004-1703
      36Monitor

      Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode

      HighCVSS 8.8Proof of conceptEPSS 2%

      fusionphp · fusion newsJul 30, 2004

    • CVE-2006-4240
      31Monitor

      PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in t

      HighCVSS 7.5Proof of conceptEPSS 3%

      fusionphp · fusion newsAug 21, 2006

    • CVE-2006-7003
      30Monitor

      PHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote attackers to execute arbitrary PHP code via a URL i

      HighCVSS 7.5No exploitEPSS 1%

      fusionphp · fusion pollsFeb 12, 2007

    • CVE-2006-3387
      21Monitor

      Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to inclu

      MediumCVSS 5.1Proof of conceptEPSS 2%

      fusionphp · fusion newsJul 6, 2006