CVE-2006-2459

MEDIUM 6.4CVE-2006-2459 · Published 19/05/2006 · updated 16/06/2026

In short

CVE-2006-2459 is a MEDIUM (CVSS 6.4) vulnerability affecting php fusion (php fusion).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
php fusion php_fusion	`= 6.00.306= 6.00.307`	No fix yet

Description

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srch_where parameter.

References

retrogod.altervista.org/phpfusion_600306_sql.html · Exploit
secunia.com/advisories/20129 · Vendor Advisory
securityreason.com/securityalert/922
securitytracker.com/id
osvdb.org/25542
securityfocus.com/archive/1/434162/100/0/threaded
securityfocus.com/bid/18009
vupen.com/english/advisories/2006/1839
exchange.xforce.ibmcloud.com/vulnerabilities/26491

More vulnerabilities in php fusion

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

php fusion

php_fusion

= 6.00.306= 6.00.307

No fix yet

More vulnerabilities in php fusion

See all →