CVE-2013-1806

php-fusion < 7.02.06 - Authenticated Path Traversal and Arbitrary File Execution

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-1806.

AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in PHP-Fusion 7.02.05, including Local File Inclusion (LFI) and SQL Injection (SQLi) flaws. It provides root cause analysis, affected code paths, and exploitation conditions.

Description

Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote authenticated users to include and execute arbitrary files via a .. (dot dot) in the (1) user_theme parameter to maincore.php; or remote authenticated administrators to delete arbitrary files via the (2) enable parameter to administration/user_fields.php or (3) file parameter to administration/db_backup.php.

Exploits (1)

exploitdb WRITEUP
webappsphp
https://www.exploit-db.com/exploits/24562

This is a detailed technical writeup describing multiple vulnerabilities in PHP-Fusion 7.02.05, including Local File Inclusion (LFI) and SQL Injection (SQLi) flaws. It provides root cause analysis, affected code paths, and exploitation conditions.

Classification
Writeup 100%
Attack Type
Lfi | Sqli
Complexity
Moderate
Reliability
Reliable
Target: PHP-Fusion 7.02.05
Auth required
Prerequisites: Valid user/admin credentials · PHP < 5.3.4 for LFI · magic_quotes_gpc=off for SQLi
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (9)

Core 9
Core References
Exploit x_refsource_misc
http://www.waraxe.us/advisory-97.html
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/03/03/2
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/03/03/1
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/90692
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/90694
Patch, Vendor Advisory x_refsource_confirm
http://www.php-fusion.co.uk/news.php?readmore=569
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/90696
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2013/Feb/154

Scores

EPSS 0.0784
EPSS Percentile 93.9%

Details

CWE
CWE-22
Status published
Products (5)
php-fusion/php-fusion 7.02.01
php-fusion/php-fusion 7.02.02
php-fusion/php-fusion 7.02.03
php-fusion/php-fusion 7.02.04
php-fusion/php-fusion < 7.02.05
Published Apr 30, 2014
Tracked Since Feb 18, 2026