Read the docs
TI-2006-03447 Aliases CVE-2006-3555GHSA-j5rv-6w5m-gxm6

Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before…

Priority LOW 29Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension, and begins with a GIF header followed by JavaScript code, which is executed by Internet Explorer.

Why it matters now

EPSS 0.01342 71st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:a:php_fusion:php_fusion:6.00.3:*:*:*:*:*:*:*6.00.3VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*6.00.100VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*6.00.101VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*6.00.102VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*6.00.103VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*6.00.104VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*6.0.105VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*6.00.105VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*6.00.106VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:*6.0.106VulnerablePhp Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.3:*:*:*:*:*:*:* Versions 6.00.3 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:* Versions 6.00.100 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:* Versions 6.00.101 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:* Versions 6.00.102 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:* Versions 6.00.103 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:* Versions 6.00.104 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:* Versions 6.0.105 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:* Versions 6.00.105 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:* Versions 6.00.106 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:* Versions 6.0.106 Vulnerable ·Php Fusion
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*6.00.107VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:*6.0.107VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*6.00.108VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*6.00.109VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.110:*:*:*:*:*:*:*6.00.110VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.200:*:*:*:*:*:*:*6.00.200VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*6.00.204VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.205:*:*:*:*:*:*:*6.00.205VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*6.00.206VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.207:*:*:*:*:*:*:*6.00.207VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.300:*:*:*:*:*:*:*6.00.300VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.303:*:*:*:*:*:*:*6.00.303VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.304:*:*:*:*:*:*:*6.00.304VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.306:*:*:*:*:*:*:*6.00.306VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.00.307:*:*:*:*:*:*:*6.00.307VulnerablePhp Fusion
cpe:2.3:a:php_fusion:php_fusion:6.01.2:*:*:*:*:*:*:*6.01.2VulnerablePhp Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:* Versions 6.00.107 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:* Versions 6.0.107 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:* Versions 6.00.108 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:* Versions 6.00.109 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.110:*:*:*:*:*:*:* Versions 6.00.110 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.200:*:*:*:*:*:*:* Versions 6.00.200 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:* Versions 6.00.204 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.205:*:*:*:*:*:*:* Versions 6.00.205 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:* Versions 6.00.206 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.207:*:*:*:*:*:*:* Versions 6.00.207 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.300:*:*:*:*:*:*:* Versions 6.00.300 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.303:*:*:*:*:*:*:* Versions 6.00.303 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.304:*:*:*:*:*:*:* Versions 6.00.304 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.306:*:*:*:*:*:*:* Versions 6.00.306 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.00.307:*:*:*:*:*:*:* Versions 6.00.307 Vulnerable ·Php Fusion
  • cpe:2.3:a:php_fusion:php_fusion:6.01.2:*:*:*:*:*:*:* Versions 6.01.2 Vulnerable ·Php Fusion

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-3555
  2. 2026-10-03 Alias added: GHSA-j5rv-6w5m-gxm6

References

Advisory 1

Other 2

  • TI-2004-01600 The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the… CVSS 2.0HIGH 7.5
  • TI-2006-02270 PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3… CVSS 2.0MEDIUM 6.4
  • TI-2005-02985 SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote… CVSS 2.0HIGH 7.5
  • TI-2005-02986 SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows… CVSS 2.0HIGH 7.5
  • TI-2006-02271 Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote… CVSS 2.0MEDIUM 6.4
  • TI-2005-03795 SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote… CVSS 2.0HIGH 7.5
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences