Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

fusionphp / fusion_news CVEs

Beta · best-effort

3 CVEs tagged to fusionphp / fusion_news — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to fusionphp vendor archive

CVE-2006-4240

Published Aug 21, 2006

PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2006-3387

Published Jul 6, 2006

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) s…

CVSS 5.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2004-1703

Published Jul 30, 2004

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the sign…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1