CVE-2006-2459

no score yetEPSS 2.1%

php fusion php fusion: no CVSS score yet. EPSS 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srch_where parameter.

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
Published: 2006-05-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

php_fusion:php_fusion

References

http://retrogod.altervista.org/phpfusion_600306_sql.html
http://secunia.com/advisories/20129
http://securityreason.com/securityalert/922
http://securitytracker.com/id?1016111
http://www.osvdb.org/25542

Check your stack JSON