CVEDB API

PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.7%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2005-2401

Php Fusion » Php Fusion » Version: 4.00

cpe:2.3:a:php_fusion:php_fusion:4.00
Php Fusion » Php Fusion » Version: 4.01

cpe:2.3:a:php_fusion:php_fusion:4.01
Php Fusion » Php Fusion » Version: 5.0

cpe:2.3:a:php_fusion:php_fusion:5.0
Php Fusion » Php Fusion » Version: 5.01_service_pack

cpe:2.3:a:php_fusion:php_fusion:5.01_service_pack
Php Fusion » Php Fusion » Version: 6.0.105

cpe:2.3:a:php_fusion:php_fusion:6.0.105
Php Fusion » Php Fusion » Version: 6.0.106

cpe:2.3:a:php_fusion:php_fusion:6.0.106