Read the docs

PHPFusion

Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

PHPFusion records in CISA KEV

No PHPFusion vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Members Cv Module · all components

Priority LOW 29

SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby paramete…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00944 Published 2009-03-05 No fix listed CWE-89
Open these records in search →