Php-fusion vulnerabilities

Products

• Php-fusion 37
• Phpfusion 14

Newest

• php-fusion, php-fusion phpfusion +1 more PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS) CVE-2020-37152 5.1 MediumFebruary 5, 2026
• php fusion fusion, php-fusion phpfusion +1 more PHP-Fusion 9.03.50 - 'panels.php' Eval Injection CVE-2020-37137 8.6 HighFebruary 5, 2026
• php-fusion phpfusion PHPFusion 9.03.50 - Persistent Cross-Site Scripting CVE-2020-36996 5.1 MediumJanuary 30, 2026
• php-fusion phpfusion PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload CVE-2023-53928 5.1 MediumDecember 17, 2025
• php-fusion phpfusion Arbitrary File Read in Fusion File Manager CVE-2023-4480 5.5 MediumSeptember 5, 2023
• php-fusion phpfusion Local file Inclusion (LFI) in Forum Infusion via Directory Traversal CVE-2023-2453 8.8 HighSeptember 5, 2023
• php-fusion An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a... CVE-2021-3172 8.1 HighFebruary 17, 2023
• php-fusion phpfusion, phpfusion phpfusion/phpfusion +1 more Unverified Password Change in phpfusion/phpfusion CVE-2022-3152 9.6 CriticalSeptember 7, 2022
• php-fusion phpfusion A reflected cross-site scripting (XSS) vulnerability in PHP-Fusion 7.02.07 allows remote... CVE-2014-8597 6.1 MediumFebruary 17, 2022
• php-fusion phpfusion Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP... CVE-2020-23754 9.6 CriticalNovember 2, 2021
• php-fusion phpfusion PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager... CVE-2021-40188 7.2 HighOctober 11, 2021
• php-fusion phpfusion PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will... CVE-2021-40189 7.2 HighOctober 11, 2021
• php-fusion phpfusion PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag... CVE-2021-40541 6.1 MediumOctober 11, 2021
• php-fusion Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions... CVE-2020-23702 4.8 MediumJuly 7, 2021
• php-fusion A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP... CVE-2020-23185 5.4 MediumJuly 2, 2021
• php-fusion A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of... CVE-2020-23184 5.4 MediumJuly 2, 2021
• php-fusion The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60... CVE-2020-23182 5.4 MediumJuly 2, 2021
• php-fusion A reflected cross site scripting (XSS) vulnerability in /administration/theme.php of PHP-Fusion 9... CVE-2020-23181 5.4 MediumJuly 2, 2021
• php-fusion A stored cross site scripting (XSS) vulnerability in administration/settings_main.php of PHP... CVE-2020-23179 5.4 MediumJuly 2, 2021
• php-fusion An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out,... CVE-2020-23178 5.4 MediumJuly 2, 2021
• php-fusion phpfusion CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote... CVE-2021-28280 6.1 MediumApril 29, 2021
• php-fusion phpfusion PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox... CVE-2020-35687 Public exploit 4.3 MediumJanuary 13, 2021
• php-fusion login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages... CVE-2020-35952 6.5 MediumJanuary 3, 2021
• php-fusion Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user ... CVE-2020-24949 Public exploit EPSS 67.5% 8.8 HighSeptember 3, 2020
• php-fusion PHP-Fusion 9.03.60 is affected by Cross Site Scripting (XSS) via infusions/member_poll_panel... CVE-2020-23658 5.4 MediumAugust 26, 2020
• php-fusion PHP-Fusion 9.03 allows XSS on the preview page. CVE-2020-17450 6.1 MediumAugust 12, 2020
• php-fusion PHP-Fusion 9.03 allows XSS via the error_log file. CVE-2020-17449 5.4 MediumAugust 12, 2020
• php-fusion PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field. CVE-2020-15041 4.8 MediumJune 24, 2020
• php-fusion A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments... CVE-2020-14960 7.2 HighJune 21, 2020
• php-fusion In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take... CVE-2020-12718 5.4 MediumMay 7, 2020
• php-fusion Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to... CVE-2020-12706 Public exploit 5.4 MediumMay 7, 2020
• php-fusion Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to... CVE-2020-12708 6.1 MediumMay 7, 2020
• php-fusion PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection... CVE-2020-12461 8.8 HighApril 29, 2020
• php-fusion An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited... CVE-2020-12438 5.4 MediumApril 28, 2020
• php-fusion In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary... CVE-2019-12099 Public exploit EPSS 17.2% 8.8 HighMay 14, 2019
• php-fusion Cross-site scripting (XSS) vulnerability in PHP-Fusion 9. CVE-2015-8375 5.4 MediumSeptember 25, 2017
• php-fusion Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to... CVE-2014-8596 Public exploit 7.5 HighNovember 17, 2014
• php-fusion SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01... CVE-2013-7375 Public exploit 7.5 HighMay 5, 2014
• php-fusion Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to... CVE-2013-1803 Public exploit 7.5 HighMay 5, 2014
• php-fusion PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted... CVE-2013-1807 Public exploit 5.0 MediumApril 30, 2014
• php-fusion Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote... CVE-2013-1806 Public exploit 6.5 MediumApril 30, 2014
• php-fusion Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote... CVE-2013-1804 Public exploit 4.3 MediumApril 29, 2014
• php-fusion Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote... CVE-2012-6043 Public exploit 4.3 MediumNovember 26, 2012
• php-fusion ** DISPUTED ** Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote... CVE-2010-4931 Public exploitDisputed EPSS 15.6% 10.0 HighOctober 9, 2011
• php-fusion Cross-site scripting (XSS) vulnerability in messages.php in PHP-Fusion 6.01.17 and 7.00.3 allows... CVE-2008-6850 4.3 MediumJuly 7, 2009
• php-fusion members cv module SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion,... CVE-2009-0831 Public exploit 6.0 MediumMarch 5, 2009
• php-fusion SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute... CVE-2008-5946 Public exploit 7.5 HighJanuary 22, 2009
• php-fusion team impact ti blog system module SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion... CVE-2008-5733 Public exploit 7.5 HighDecember 26, 2008
• php-fusion SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when... CVE-2008-5335 Public exploit 6.8 MediumDecember 5, 2008
• php-fusion SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute... CVE-2008-5197 Public exploit 7.5 HighNovember 21, 2008
• Show olderLoading…