Out-of-date Version (PhpFusion)

Severity: Information

Summary#

Invicti identified the target web site is using PhpFusion and detected that it is out of date. PhpFusion is an open-source content management system (CMS).

Impact#

Since this is an old version of the software, it may be vulnerable to attacks.

Remediation#

Please upgrade your installation of PhpFusion to the latest stable version.

Classifications#

ISO27001-A.14.1.2, PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), OWASP 2013-A9, OWASP 2017-A9

Invicti Security Insights

Sven Morgenroth Talks About PHP Object Injection Vulnerabilities on Paul’s Security Weekly Podcast
End of Support for PHP 5 and PHP 7.0
The Powerful Resource of PHP Stream Wrappers
Sven Morgenroth Talks About PHP Type Juggling on Paul’s Security Weekly Podcast
Detailed Explanation of PHP Type Juggling Vulnerabilities