Test ID:	1.3.6.1.4.1.25623.1.0.803431
Category:	Web application abuses
Title:	PHP-Fusion Multiple Vulnerabilities
Summary:	PHP-Fusion is prone to multiple vulnerabilities.
Description:	Summary: PHP-Fusion is prone to multiple vulnerabilities. Vulnerability Insight: Please see the references for more information on the vulnerabilities. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site and manipulate SQL queries by injecting arbitrary SQL code or disclose or manipulation of arbitrary data. Affected Software/OS: PHP-Fusion Version 7.02.05 and prior versions may also be affected Solution: Upgrade to PHP-Fusion Version 7.02.06 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1803 http://seclists.org/fulldisclosure/2013/Feb/154 http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html http://www.waraxe.us/advisory-97.html http://www.openwall.com/lists/oss-security/2013/03/03/2 http://www.openwall.com/lists/oss-security/2013/03/03/1 http://osvdb.org/90693 http://osvdb.org/90695 http://osvdb.org/90709 http://osvdb.org/90710 http://osvdb.org/90711 http://osvdb.org/90712 http://osvdb.org/90713 http://osvdb.org/show/osvdb/90714 http://secunia.com/advisories/52403 Common Vulnerability Exposure (CVE) ID: CVE-2013-1804 http://osvdb.org/90707 http://osvdb.org/90708 Common Vulnerability Exposure (CVE) ID: CVE-2013-1805 Common Vulnerability Exposure (CVE) ID: CVE-2013-1806 http://www.osvdb.org/90692 http://www.osvdb.org/90694 http://www.osvdb.org/90696 Common Vulnerability Exposure (CVE) ID: CVE-2013-1807 http://www.osvdb.org/90691 Common Vulnerability Exposure (CVE) ID: CVE-2013-7375 BugTraq ID: 58011 http://www.securityfocus.com/bid/58011 Bugtraq: 20130216 PHP-Fusion 7.02.05 SQL Injection (Google Search) http://seclists.org/bugtraq/2013/Feb/80 http://packetstormsecurity.com/files/120368/PHP-Fusion-CMS-7.02.05-SQL-Injection.html https://vndh.net/note:php-fusion-70205-sql-injection http://osvdb.org/show/osvdb/90359
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.