Glfusion vulnerabilities

Products

• Glfusion 11

Newest

• glfusion glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting (XSS) vulnerability. The... CVE-2021-45843 6.1 MediumDecember 27, 2021
• glfusion glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ... CVE-2021-44942 4.3 MediumDecember 14, 2021
• glfusion glFusion CMS 1.7.9 is affected by an access control vulnerability via /public_html/users.php. CVE-2021-44949 9.8 CriticalDecember 14, 2021
• glfusion glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html... CVE-2021-44937 5.3 MediumDecember 14, 2021
• glfusion glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html... CVE-2021-44935 9.1 CriticalDecember 14, 2021
• glfusion Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote... CVE-2013-1466 Public exploit 4.3 MediumFebruary 5, 2014
• glfusion Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes... CVE-2009-4796 Public exploit 7.5 HighApril 22, 2010
• glfusion glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a... CVE-2009-1283 Public exploit 6.8 MediumApril 9, 2009
• glfusion SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier... CVE-2009-1282 Public exploit 7.5 HighApril 9, 2009
• glfusion Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to... CVE-2009-1281 Public exploit 4.3 MediumApril 9, 2009
• glfusion Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in... CVE-2009-0455 Public exploit 2.6 LowFebruary 11, 2009