CVSS: 4.3EPSS: 0%CPEs: 7EXPL: 2CVE-2005-2783 – PHP-Fusion 4.0/5.0/6.0 - BBCode URL Tag Script Injection
https://notcve.org/view.php?id=CVE-2005-2783
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags. • https://www.exploit-db.com/exploits/26209 http://marc.info/?l=bugtraq&m=112533836103267&w=2 http://secunia.com/advisories/16632 http://www.securityfocus.com/bid/14688 https://exchange.xforce.ibmcloud.com/vulnerabilities/22056 •
CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 0CVE-2005-2401
https://notcve.org/view.php?id=CVE-2005-2401
PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag. PHP-Fusion permite que atacantes remotos inyecten CSS arbitrario mediante el tag de color BBCode. • http://secunia.com/advisories/16096 http://www.osvdb.org/18111 http://www.securityfocus.com/bid/14332 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2004-2438
https://notcve.org/view.php?id=CVE-2004-2438
Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field. • http://secunia.com/advisories/12686 http://www.osvdb.org/10439 http://www.securityfocus.com/bid/11296 https://exchange.xforce.ibmcloud.com/vulnerabilities/17548 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2004-2437
https://notcve.org/view.php?id=CVE-2004-2437
SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php. • http://secunia.com/advisories/12686 http://www.osvdb.org/10437 http://www.osvdb.org/10438 http://www.securityfocus.com/bid/11296 https://exchange.xforce.ibmcloud.com/vulnerabilities/17546 •