CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-4673

Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.4%

CVSS Severity

CVSS v2 Score 2.6

References

Products affected by CVE-2006-4673

Php Fusion » Php Fusion » Version: Any

cpe:2.3:a:php_fusion:php_fusion:*
Php Fusion » Php Fusion » Version: 6.0.105

cpe:2.3:a:php_fusion:php_fusion:6.0.105
Php Fusion » Php Fusion » Version: 6.0.106

cpe:2.3:a:php_fusion:php_fusion:6.0.106
Php Fusion » Php Fusion » Version: 6.0.107

cpe:2.3:a:php_fusion:php_fusion:6.0.107
Php Fusion » Php Fusion » Version: 6.0.109

cpe:2.3:a:php_fusion:php_fusion:6.0.109
Php Fusion » Php Fusion » Version: 6.0.110

cpe:2.3:a:php_fusion:php_fusion:6.0.110
Php Fusion » Php Fusion » Version: 6.0.204

cpe:2.3:a:php_fusion:php_fusion:6.0.204
Php Fusion » Php Fusion » Version: 6.0.206

cpe:2.3:a:php_fusion:php_fusion:6.0.206
Php Fusion » Php Fusion » Version: 6.0.303

cpe:2.3:a:php_fusion:php_fusion:6.0.303
Php Fusion » Php Fusion » Version: 6.0.304

cpe:2.3:a:php_fusion:php_fusion:6.0.304
Php Fusion » Php Fusion » Version: 6.0.306

cpe:2.3:a:php_fusion:php_fusion:6.0.306
Php Fusion » Php Fusion » Version: 6.0.307

cpe:2.3:a:php_fusion:php_fusion:6.0.307

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-4673

Products

Pricing

Contact Us