CVEvulnerability

CVE-2006-0593

4.3 MEDIUM Published 2006-02-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-02-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php.

Affected configurations

• php fusion php fusion 6.00.100 • php fusion php fusion 6.00.101 • php fusion php fusion 6.00.102 • php fusion php fusion 6.00.103 • php fusion php fusion 6.00.104 • php fusion php fusion 6.00.105 • php fusion php fusion 6.00.106 • php fusion php fusion 6.00.107 • php fusion php fusion 6.00.108 • php fusion php fusion 6.00.109 • php fusion php fusion 6.00.110 • php fusion php fusion 6.00.200 • php fusion php fusion 6.00.204 • php fusion php fusion 6.00.205 • php fusion php fusion 6.00.206 • php fusion php fusion 6.00.207 • php fusion php fusion 6.00.300 • php fusion php fusion 6.00.303

References