Phpfusion

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:phpfusion:phpfusion:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpfusion (dabd4091-44a9-5b02-8bc6-d9baf219825b)
ProductPhpfusion (2ea20fda-3cd3-567e-9b70-820e7017702d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4480 vulnerable 2026-06-08 06:16:12.533857 Arbitrary File Read in Fusion File Manager
MEDIUM (5.5)
Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write files to arbitrary locations, provided the files pass the application’s mime-type and file extension validation. 
Published: 2023-09-05T14:43:25.762Z
Updated: 2024-09-26T18:17:31.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2453 vulnerable 2026-06-08 06:02:42.329707 Local file Inclusion (LFI) in Forum Infusion via Directory Traversal
HIGH (8.8)
There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘require_once’ statement. This allows arbitrary files with the ‘.php’ extension for which the absolute path is known to be included and executed. There are no known means in PHPFusion through which an attacker can upload and target a ‘.php’ file payload.
Published: 2023-09-05T14:39:10.011Z
Updated: 2024-09-27T13:52:08.560Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.