CVE-2006-4673

PHP-Fusion <6.01.4 - SQL Injection

Title source: llm

Description

Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/28496

View Code ZIP pw:eip

References (7)

[Mailing List] http://marc.info/?l=bugtraq&m=115765187519458&w=2

[Exploit] http://retrogod.altervista.org/phpfusion_6-01-4_xpl.html

[Patch, Vendor Advisory] http://secunia.com/advisories/21830

[Various Sources] http://www.php-fusion.co.uk/news.php?readmore=353

[Exploit] http://www.securityfocus.com/bid/19908

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/28818

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/3523

Scores

EPSS 0.0060

EPSS Percentile 69.5%

Details

Status published

Products (12)

php_fusion/php_fusion 6.0.105

php_fusion/php_fusion 6.0.106

php_fusion/php_fusion 6.0.107

php_fusion/php_fusion 6.0.109

php_fusion/php_fusion 6.0.110

php_fusion/php_fusion 6.0.204

php_fusion/php_fusion 6.0.206

php_fusion/php_fusion 6.0.303

php_fusion/php_fusion 6.0.304

php_fusion/php_fusion 6.0.306

... and 2 more

Published Sep 11, 2006

Tracked Since Feb 18, 2026