Vulnerabilities

TI-2006-04095 CVE-2006-4240 · GHSA-27xx-4333-8mw4

PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote…

LOW 39

PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03248 Published 2006-08-21 No fix listed

TI-2006-03285 CVE-2006-3387 · GHSA-v8jw-9qw2-726j

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when…

LOW 27

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files via a ..

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01988 Published 2006-07-06 No fix listed

TI-2004-01579 CVE-2004-1703 · GHSA-grc6-2v8g-8xww

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is…

MEDIUM 42

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the adm…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01964 Published 2005-02-26 No fix listed CWE-352

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote…

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when…

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is…