Approved changes feed: RSS · Atom

cpe:2.3:a:php_fusion:php_fusion:6.0.303:*:*:*:*:*:*:*

part: a version: 6.0.303 update: *

VendorPhp Fusion (b98588ff-03e9-5cd6-aed1-a10b441261bd)
ProductPhp Fusion (7cbdcda6-d222-52b5-a525-e99b85bfe051)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/phpfusion/phpfusion purl2cpe 2026-06-01 10:11:42.482077

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4673 vulnerable 2026-06-08 04:49:18.505876 Details available
Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php.
Published: 2006-09-11T16:00:00.000Z
Updated: 2024-08-07T19:23:40.437Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.