GCVE - cpe:2.3:a:php_fusion:php_fusion:4.01:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:php_fusion:php_fusion:4.01:*:*:*:*:*:*:*

part: a version: 4.01 update: *

Vendor	Php Fusion (`b98588ff-03e9-5cd6-aed1-a10b441261bd`)
Product	Php Fusion (`7cbdcda6-d222-52b5-a525-e99b85bfe051`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/phpfusion/phpfusion`	purl2cpe	2026-06-01 10:11:42.450374

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3159`	not_vulnerable	2026-06-08 04:48:39.744496	Details available SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158. Published: 2005-10-06T04:00:00.000Z Updated: 2024-08-07T23:01:57.978Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14489 http://www.osvdb.org/18708 http://marc.info/?l=bugtraq&m=112811077320676&w=2 http://www.s4a.cc/forum/archive/index.php/t-3585.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2783`	vulnerable	2026-06-08 04:48:30.535426	Details available Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags. Published: 2005-09-02T04:00:00.000Z Updated: 2024-08-07T22:45:02.321Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14688 https://exchange.xforce.ibmcloud.com/vulnerabilities/22056 http://marc.info/?l=bugtraq&m=112533836103267&w=2 http://secunia.com/advisories/16632/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2401`	vulnerable	2026-06-08 04:48:29.261693	Details available PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag. Published: 2005-07-27T04:00:00.000Z Updated: 2024-08-07T22:22:49.123Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14332 http://www.osvdb.org/18111 http://secunia.com/advisories/16096	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2438`	vulnerable	2026-06-08 04:48:09.722873	Details available Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field. Published: 2005-08-20T04:00:00.000Z Updated: 2024-08-08T01:29:13.352Z Open on db.gcve.eu Reference links http://www.osvdb.org/10439 https://exchange.xforce.ibmcloud.com/vulnerabilities/17548 http://www.securityfocus.com/bid/11296 http://secunia.com/advisories/12686/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2437`	vulnerable	2026-06-08 04:48:09.722522	Details available SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php. Published: 2005-08-20T04:00:00.000Z Updated: 2024-08-08T01:29:13.410Z Open on db.gcve.eu Reference links http://www.osvdb.org/10437 https://exchange.xforce.ibmcloud.com/vulnerabilities/17546 http://www.securityfocus.com/bid/11296 http://www.osvdb.org/10438 http://secunia.com/advisories/12686/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.