CVE-2005-2074

Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the (1) news_body, (2) article_description, or (3) article_body parameters to submit.php.

• http://dark-assassins.com/forum/viewtopic.php?t=145Patch, URL Repurposed
• http://secunia.com/advisories/15830Patch, Vendor Advisory
• http://www.securityfocus.com/bid/14066
• http://www.vupen.com/english/advisories/2005/0888
• http://dark-assassins.com/forum/viewtopic.php?t=145Patch, URL Repurposed
• http://secunia.com/advisories/15830Patch, Vendor Advisory
• http://www.securityfocus.com/bid/14066
• http://www.vupen.com/english/advisories/2005/0888

Published

Jun 29, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2068FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote a…
• CVE-2005-2069pam_ldap and nss_ldap, when used with OpenLDAP and connectin…
• CVE-2005-2070The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, w…
• CVE-2005-2071traceroute in Sun Solaris 10 on x86 systems allows local use…
• CVE-2005-2072The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts th…
• CVE-2005-2073Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2…
• CVE-2005-2075PHP-Fusion 5.0 and 6.0 stores the database file with a predi…
• CVE-2005-2076HP Version Control Repository Manager (VCRM) before 2.1.1.73…
• CVE-2005-2077Cross-site scripting (XSS) vulnerability in error.asp for Ho…
• CVE-2005-2078BisonFTP Server V4R1 allows remote authenticated users to ca…
• CVE-2005-2079Heap-based buffer overflow in the Admin Plus Pack Option for…
• CVE-2005-2080Unknown vulnerability in Remote Agent for Windows Servers (R…