GCVE - cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

Vendor	Php Fusion (`b98588ff-03e9-5cd6-aed1-a10b441261bd`)
Product	Php Fusion (`7cbdcda6-d222-52b5-a525-e99b85bfe051`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/phpfusion/phpfusion`	purl2cpe	2026-06-01 10:11:42.451252

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3159`	not_vulnerable	2026-06-08 04:48:39.744967	Details available SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158. Published: 2005-10-06T04:00:00.000Z Updated: 2024-08-07T23:01:57.978Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14489 http://www.osvdb.org/18708 http://marc.info/?l=bugtraq&m=112811077320676&w=2 http://www.s4a.cc/forum/archive/index.php/t-3585.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2783`	vulnerable	2026-06-08 04:48:30.535446	Details available Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags. Published: 2005-09-02T04:00:00.000Z Updated: 2024-08-07T22:45:02.321Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14688 https://exchange.xforce.ibmcloud.com/vulnerabilities/22056 http://marc.info/?l=bugtraq&m=112533836103267&w=2 http://secunia.com/advisories/16632/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2401`	vulnerable	2026-06-08 04:48:29.261734	Details available PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag. Published: 2005-07-27T04:00:00.000Z Updated: 2024-08-07T22:22:49.123Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14332 http://www.osvdb.org/18111 http://secunia.com/advisories/16096	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2075`	vulnerable	2026-06-08 04:48:28.274256	Details available PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/db_backups directory in PHP-Fusion 6.0 or the fusion_admin/db_backups directory in 5.0. Published: 2005-06-29T04:00:00.000Z Updated: 2024-08-07T22:15:36.872Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15830 http://www.vupen.com/english/advisories/2005/0888 http://dark-assassins.com/forum/viewtopic.php?t=142	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0692`	vulnerable	2026-06-08 04:48:13.341108	Details available Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript. Published: 2005-03-08T05:00:00.000Z Updated: 2024-08-07T21:21:06.498Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=111022851900028&w=2 http://www.php-fusion.co.uk/news.php?readmore=183 http://secunia.com/advisories/14492	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.