CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1CVE-2005-0829 – PHP-Fusion 4/5 - 'Setuser.php' HTML Injection
https://notcve.org/view.php?id=CVE-2005-0829
Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pass parameters. • https://www.exploit-db.com/exploits/25241 http://marc.info/?l=bugtraq&m=111125692513645&w=2 http://marc.info/?l=bugtraq&m=111142752220155&w=2 http://marc.info/?l=bugtraq&m=111142918711745&w=2 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2005-0692
https://notcve.org/view.php?id=CVE-2005-0692
Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript. • http://marc.info/?l=bugtraq&m=111022851900028&w=2 http://secunia.com/advisories/14492 http://www.php-fusion.co.uk/news.php?readmore=183 •
CVSS: 5.0EPSS: 2%CPEs: 1EXPL: 1CVE-2005-0345 – PHP-Fusion 4.0 - 'Viewthread.php' Information Disclosure
https://notcve.org/view.php?id=CVE-2005-0345
viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter. • https://www.exploit-db.com/exploits/25089 http://marc.info/?l=bugtraq&m=110788267311132&w=2 http://www.securityfocus.com/bid/12482 https://exchange.xforce.ibmcloud.com/vulnerabilities/19257 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2004-2438
https://notcve.org/view.php?id=CVE-2004-2438
Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field. • http://secunia.com/advisories/12686 http://www.osvdb.org/10439 http://www.securityfocus.com/bid/11296 https://exchange.xforce.ibmcloud.com/vulnerabilities/17548 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2004-1723
https://notcve.org/view.php?id=CVE-2004-1723
The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message. • http://marc.info/?l=bugtraq&m=109285292901685&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17036 •