Skip to content
OpenAdvisories

Vendor

phpfusion

3 known vulnerabilities.

Products

PHPFusion 2 phpfusion/phpfusion 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-2453

    Local file Inclusion (LFI) in Forum Infusion via Directory Traversal

    There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘require_once’ statement. This allows arbitrary files with the ‘.php’ extension for which the absolute path is known to be inc…

    phpfusion PHPFusion