CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 2CVE-2009-0832 – PHP-Fusion Mod E-Cart 1.3 - 'items.php' SQL Injection
https://notcve.org/view.php?id=CVE-2009-0832
05 Mar 2009 — SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter. Vulnerabilidad de inyección SQL en items.php en el módulo E-Cart v1.3 para PHP-Fusion permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro "CA". • https://www.exploit-db.com/exploits/7698 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 3CVE-2008-5946 – PHP-Fusion 4.01 - 'readmore.php' SQL Injection
https://notcve.org/view.php?id=CVE-2008-5946
22 Jan 2009 — SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the news_id parameter. Vulnerabilidad de inyección SQL en readmore.php en PHP-Fusion 4.01 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro news_id. • https://www.exploit-db.com/exploits/32242 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 2CVE-2008-5733 – PHP-Fusion Mod TI - 'id' SQL Injection
https://notcve.org/view.php?id=CVE-2008-5733
26 Dec 2008 — SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter. Vulnerabilidad de inyección SQL en blog.php en Team Impact TI Blog System mod para PHP-Fusion permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id. • https://www.exploit-db.com/exploits/7598 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 2CVE-2008-5335 – PHP-Fusion 7.00.1 - 'messages.php' SQL Injection
https://notcve.org/view.php?id=CVE-2008-5335
05 Dec 2008 — SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msg_send parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and CVE-2006-2459. Vulnerabilidad de inyección SQL en messages.php en PHP-Fusion v6.01.15 y v7.00.1, cuando magic_quotes_gpc se deshabilita, permitiría a atacantes remotos ejecutar comando SQL a su elección a traves ... • https://www.exploit-db.com/exploits/7173 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 2CVE-2008-5196 – PHP-Fusion Mod Kroax 4.42 - 'category' SQL Injection
https://notcve.org/view.php?id=CVE-2008-5196
21 Nov 2008 — SQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter. Vulnerabilidad de inyección SQL en kroax.php en el módulo Kroax (the_kroax) v4.42 y anteriores de PHP-Fusion permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de parámetro category. • https://www.exploit-db.com/exploits/5942 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2CVE-2008-5197 – PHP-Fusion Mod Classifieds - 'lid' SQL Injection
https://notcve.org/view.php?id=CVE-2008-5197
21 Nov 2008 — SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detail_adverts action. Vulnerabilidad de inyección SQL en classifieds.php en PHP-Fusion permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de parámetro lid en una acción detail_adverts. • https://www.exploit-db.com/exploits/5961 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 2CVE-2008-5074 – PHP-Fusion Mod freshlinks - 'linkid' SQL Injection
https://notcve.org/view.php?id=CVE-2008-5074
14 Nov 2008 — SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter. Vulnerabilidad de inyección SQL en index.php en el módulo Freshlinks v1.0 RC1 para PHP-Fusion permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro "linkid". • https://www.exploit-db.com/exploits/6620 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2CVE-2008-4521 – PHP-Fusion Mod raidtracker_panel - 'INFO_RAID_ID' SQL Injection
https://notcve.org/view.php?id=CVE-2008-4521
09 Oct 2008 — SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFO_RAID_ID parameter. Vulnerabilidad de inyección SQL en el archivo thisraidprogress.php en el módulo World of Warcraft tracker infusion (raidtracker_panel) 2.0 para PHP-Fusion que permite a los atacante remotos ejecutar arbitariamente comandos SQL a través del parámetro INFO_RAID_ID. • https://www.exploit-db.com/exploits/6682 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2CVE-2008-4527 – PHP-Fusion Mod recept - 'kat_id' SQL Injection
https://notcve.org/view.php?id=CVE-2008-4527
09 Oct 2008 — SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the kat_id parameter in a kategorier action. NOTE: some of these details are obtained from third party information. Vulnerabilidad de inyección SQL en recept.php en el modulo Recepies (Recept) 1.1 para PHP-Fusion que permite a atacantes remotos ejecutar comandos SQL a su elección a través de el parámetro "kat_id" en una acción Kategorier. NOTA: algunos de... • https://www.exploit-db.com/exploits/6683 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 3CVE-2008-2227 – Forum Rank System 6 - 'settings['locale']' Multiple Local File Inclusions
https://notcve.org/view.php?id=CVE-2008-2227
14 May 2008 — Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the settings[locale] parameter to (1) forum.php and (2) profile.php in infusions/rank_system/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Múltiples vulnerabilidades de Salto de Directorio en PHP-Fusion Forum Rank System 6 permiten a atacantes remotos incluir y ejecutar a... • https://www.exploit-db.com/exploits/31752 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •