Approved changes feed: RSS · Atom

cpe:2.3:a:php_fusion:php_fusion:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorPhp Fusion (b98588ff-03e9-5cd6-aed1-a10b441261bd)
ProductPhp Fusion (7cbdcda6-d222-52b5-a525-e99b85bfe051)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/phpfusion/phpfusion purl2cpe 2026-06-01 10:11:42.454049

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2075 vulnerable 2026-06-08 04:48:28.274795 Details available
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/db_backups directory in PHP-Fusion 6.0 or the fusion_admin/db_backups directory in 5.0.
Published: 2005-06-29T04:00:00.000Z
Updated: 2024-08-07T22:15:36.872Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.