CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2005-3161
https://notcve.org/view.php?id=CVE-2005-3161
Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php. • http://secunia.com/advisories/17055 http://secunia.com/secunia_research/2005-52/advisory http://securityreason.com/securityalert/54 http://www.osvdb.org/19866 http://www.osvdb.org/19867 http://www.php-fusion.co.uk/news.php?readmore=261 http://www.securityfocus.com/bid/15018 https://exchange.xforce.ibmcloud.com/vulnerabilities/22532 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2005-3158
https://notcve.org/view.php?id=CVE-2005-3158
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands via the (1) pm_email_notify and (2) pm_save_sent parameters, a different vulnerability than CVE-2005-3157 and CVE-2005-3159. • http://marc.info/?l=bugtraq&m=112801702000944&w=2 http://www.gnucitizen.org/writings/php-fusion-messages.php-sql-injection-vulnerability.xhtml •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 2CVE-2005-3159 – PHP-Fusion 4.0/5.0/6.0 - 'messages.php' SQL Injection
https://notcve.org/view.php?id=CVE-2005-3159
SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158. • https://www.exploit-db.com/exploits/26102 http://marc.info/?l=bugtraq&m=112811077320676&w=2 http://www.osvdb.org/18708 http://www.s4a.cc/forum/archive/index.php/t-3585.html http://www.securityfocus.com/bid/14489 •
CVSS: 4.3EPSS: 0%CPEs: 7EXPL: 2CVE-2005-2783 – PHP-Fusion 4.0/5.0/6.0 - BBCode URL Tag Script Injection
https://notcve.org/view.php?id=CVE-2005-2783
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags. • https://www.exploit-db.com/exploits/26209 http://marc.info/?l=bugtraq&m=112533836103267&w=2 http://secunia.com/advisories/16632 http://www.securityfocus.com/bid/14688 https://exchange.xforce.ibmcloud.com/vulnerabilities/22056 •
CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 0CVE-2005-2401
https://notcve.org/view.php?id=CVE-2005-2401
PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag. PHP-Fusion permite que atacantes remotos inyecten CSS arbitrario mediante el tag de color BBCode. • http://secunia.com/advisories/16096 http://www.osvdb.org/18111 http://www.securityfocus.com/bid/14332 •