İçeriğe atla
Noroxi

PHP-Fusion kayıtları

php-fusion üreticisine ait 62 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
20
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

62 kayıt
  • CVE-2020-24949
    55Planlayın

    Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the

    YüksekCVSS 8,8Kavram kanıtıEPSS %68

    php-fusion · php-fusion3 Eyl 2020

  • CVE-2010-4931
    45Planlayın

    Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    php-fusion · php-fusion9 Eki 2011

  • CVE-2019-12099
    40Planlayın

    In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    php-fusion · php-fusion14 May 2019

  • CVE-2020-23754
    38İzleyin

    Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute ar

    KritikCVSS 9,6İstismar yokEPSS %2

    php-fusion · phpfusion2 Kas 2021

  • CVE-2020-12461
    36İzleyin

    PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism.

    YüksekCVSS 8,8İstismar yokEPSS %2

    php-fusion · php-fusion29 Nis 2020

  • CVE-2023-2453
    35İzleyin

    Local file Inclusion (LFI) in Forum Infusion via Directory Traversal

    YüksekCVSS 8,8İstismar yokEPSS %1

    php-fusion · phpfusion5 Eyl 2023

  • CVE-2022-3152
    35İzleyin

    Unverified Password Change in phpfusion/phpfusion

    YüksekCVSS 8,8İstismar yokEPSS %1

    php-fusion · phpfusion7 Eyl 2022

  • CVE-2020-37137
    34İzleyin

    PHP-Fusion 9.03.50 - 'panels.php' Eval Injection

    YüksekCVSS 8,6İstismar yokEPSS %1

    php-fusion · phpfusion5 Şub 2026

  • CVE-2021-3172
    32İzleyin

    An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling fe

    YüksekCVSS 8,1İstismar yokEPSS %1

    php-fusion · php-fusion17 Şub 2023

  • CVE-2007-5187
    31İzleyin

    SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for PHP-Fusion allows rem

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    php-fusion · expanded calendar module3 Eki 2007

  • CVE-2008-5197
    31İzleyin

    SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    php-fusion · php-fusion21 Kas 2008

  • CVE-2013-1803
    31İzleyin

    Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to execute arbitrary SQL commands via the (1) ord

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    php-fusion · php-fusion5 May 2014

  • CVE-2013-7375
    31İzleyin

    SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to exec

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    php-fusion · php-fusion5 May 2014

  • CVE-2014-8596
    31İzleyin

    Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the (1)

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    php-fusion · php-fusion17 Kas 2014

  • CVE-2010-4791
    30İzleyin

    SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user_fotoalbum_panel) mo

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    marcusg · mg user fotoalbum panel26 Nis 2011

  • CVE-2009-0832
    30İzleyin

    SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands v

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · php-fusion5 Mar 2009

  • CVE-2008-4527
    30İzleyin

    SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQ

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · recepies module9 Eki 2008

  • CVE-2008-5733
    30İzleyin

    SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQ

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · team impact ti blog system module26 Ara 2008

  • CVE-2009-3119
    30İzleyin

    SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attackers to execute arbitr

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · php-fusion9 Eyl 2009

  • CVE-2008-5074
    30İzleyin

    SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL co

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · freshlinks module14 Kas 2008

  • CVE-2008-4521
    30İzleyin

    SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) module 2.0 for PHP-Fusion

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · world of warcraft tracker infusion module9 Eki 2008

  • CVE-2008-5196
    30İzleyin

    SQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · php-fusion21 Kas 2008

  • CVE-2008-5946
    30İzleyin

    SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the news_id par

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · php-fusion22 Oca 2009

  • CVE-2009-4889
    30İzleyin

    SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to execute arbitrary S

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    php-fusion · php-fusion11 Haz 2010

  • CVE-2021-40189
    29İzleyin

    PHPFusion 9.03.110 is affected by a remote code execution vulnerability.

    YüksekCVSS 7,2İstismar yokEPSS %2

    php-fusion · phpfusion11 Eki 2021