GCVE - cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:*

part: a version: 6.0.107 update: *

Vendor	Php Fusion (`b98588ff-03e9-5cd6-aed1-a10b441261bd`)
Product	Php Fusion (`7cbdcda6-d222-52b5-a525-e99b85bfe051`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/phpfusion/phpfusion`	purl2cpe	2026-06-01 10:11:42.476709

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4673`	vulnerable	2026-06-08 04:49:18.503464	Details available Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php. Published: 2006-09-11T16:00:00.000Z Updated: 2024-08-07T19:23:40.437Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19908 http://marc.info/?l=bugtraq&m=115765187519458&w=2 http://www.vupen.com/english/advisories/2006/3523 http://www.php-fusion.co.uk/news.php?readmore=353 http://retrogod.altervista.org/phpfusion_6-01-4_xpl.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3555`	vulnerable	2026-06-08 04:49:09.651707	Details available Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension, and begins with a GIF header followed by JavaScript code, which is executed by Internet Explorer. Published: 2006-07-13T00:00:00.000Z Updated: 2024-08-07T18:30:34.447Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/438938/100/0/threaded http://www.securityfocus.com/bid/18787 http://www.vupen.com/english/advisories/2006/2655 http://securityreason.com/securityalert/1224 http://secunia.com/advisories/20904	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2783`	vulnerable	2026-06-08 04:48:30.537194	Details available Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags. Published: 2005-09-02T04:00:00.000Z Updated: 2024-08-07T22:45:02.321Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14688 https://exchange.xforce.ibmcloud.com/vulnerabilities/22056 http://marc.info/?l=bugtraq&m=112533836103267&w=2 http://secunia.com/advisories/16632/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.