PHPFusion vulnerabilities
We track 1 vulnerability in PHPFusion products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest PHPFusion vulnerabilities
- 8.8 High severity
PHPFusion: Inclusion of Functionality from Untrusted Control Sphere
There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘require_once’ statement. This allows arbitrary files with the ‘.php’ extension for which the absolute path is known to be incl