Approved changes feed: RSS · Atom

cpe:2.3:a:php-fusion:php-fusion:6.01.15:*:*:*:*:*:*:*

part: a version: 6.01.15 update: *

VendorPhp Fusion (9882a299-fb6b-5a33-aa4e-52dbde0ad700)
ProductPhp Fusion (c30bafad-3859-5c09-a722-eecfce5287ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/phpfusion/phpfusion purl2cpe 2026-06-01 10:15:01.249161
pkg:sourceforge/product/php-fusion purl2cpe 2026-06-01 10:15:01.249163

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5335 vulnerable 2026-06-08 04:50:50.851591 Details available
SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msg_send parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and CVE-2006-2459.
Published: 2008-12-05T01:00:00.000Z
Updated: 2024-08-07T10:49:12.275Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.