medium4.3
CVE-2005-2074
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possi…
Impact
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the (1) news_body, (2) article_description, or (3) article_body parameters to submit.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Fusion | Php Fusion | Version 6.0.105 |
References
- NVD record
- CVE.org record
- http://dark-assassins.com/forum/viewtopic.php?t=145
- http://secunia.com/advisories/15830
- http://www.securityfocus.com/bid/14066
- http://www.vupen.com/english/advisories/2005/0888
- http://dark-assassins.com/forum/viewtopic.php?t=145
- http://secunia.com/advisories/15830
- http://www.securityfocus.com/bid/14066
- http://www.vupen.com/english/advisories/2005/0888