Approved changes feed: RSS · Atom

cpe:2.3:a:fusetalk:fusetalk:2.0:-:basic:*:*:*:*:*

part: a version: 2.0 update: -

VendorFusetalk (acfd389d-ed47-5222-b7f3-281ed4075ffc)
ProductFusetalk (a36ba391-efc9-5f4e-9b48-3b9d9a46d779)
Editionbasic
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3705 vulnerable 2026-06-08 04:49:54.699789 Details available
SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVAR_SUBCAT (txForumID) parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm.
Published: 2007-07-11T23:00:00.000Z
Updated: 2024-08-07T14:28:51.794Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3339 vulnerable 2026-06-08 04:49:53.730882 Details available
Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the (1) FTVAR_LINKP and (2) FTVAR_URLP parameters to (a) forum/include/error/autherror.cfm, and the (3) FTVAR_SCRIPTRUN parameter to (b) forum/include/common/comfinish.cfm and (c) blog/include/common/comfinish.cfm.
Published: 2007-06-21T21:00:00.000Z
Updated: 2024-08-07T14:14:13.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3301 vulnerable 2026-06-08 04:49:53.665126 Details available
SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrary SQL commands via the errorcode parameter. NOTE: a patch may have been released privately between April and June 2007. NOTE: this issue may overlap CVE-2007-3273.
Published: 2007-06-20T22:00:00.000Z
Updated: 2024-08-07T14:14:12.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3273 vulnerable 2026-06-08 04:49:53.553793 Details available
SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2007-06-19T21:00:00.000Z
Updated: 2024-08-07T14:14:11.887Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.