CVE-2006-3555

MEDIUM 5.8CVE-2006-3555 · Published 13/07/2006 · updated 16/06/2026

In short

CVE-2006-3555 is a MEDIUM (CVSS 5.8) vulnerability affecting php fusion (php fusion).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
php fusion php_fusion	`= 6.0.105= 6.0.106= 6.0.107= 6.00.100= 6.00.101= 6.00.102= 6.00.103= 6.00.104= 6.00.105= 6.00.106= 6.00.107= 6.00.108= 6.00.109= 6.00.110= 6.00.200= 6.00.204= 6.00.205= 6.00.206= 6.00.207= 6.00.3= 6.00.300= 6.00.303= 6.00.304= 6.00.306= 6.00.307= 6.01.2`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension, and begins with a GIF header followed by JavaScript code, which is executed by Internet Explorer.

References

More vulnerabilities in php fusion

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

php fusion

php_fusion

= 6.0.105= 6.0.106= 6.0.107= 6.00.100= 6.00.101= 6.00.102= 6.00.103= 6.00.104= 6.00.105= 6.00.106= 6.00.107= 6.00.108= 6.00.109= 6.00.110= 6.00.200= 6.00.204= 6.00.205= 6.00.206= 6.00.207= 6.00.3= 6.00.300= 6.00.303= 6.00.304= 6.00.306= 6.00.307= 6.01.2

No fix yet

Description

More vulnerabilities in php fusion

See all →