NetSight
medium5.0

CVE-2005-2401

PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.

Impact

PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.

Affected products

VendorProductAffected versions
Php FusionPhp Fusion
Versions 4.00, 4.01, 5.0, 5.01_service_pack, 6.0.105, 6.0.106

References