CVE-2020-23182

The component /php-fusion/infusions/shoutboxpanel/shoutboxarchive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel...

CVE-2020-23181

CVE-2020-23181 is a reflected cross-site scripting (XSS) vulnerability in PHP-Fusion 9.03.60. The flaw occurs in /administration/theme.php and can be exploited by an authenticated attacker who injects a crafted payload into the “Manage Theme” field to execute arbitrary web scripts or HTML in the ...

CVE-2020-23179

CVE-2020-23179 describes a stored XSS in PHP-Fusion 9.03.50 via the Site footer field in administration/settings_main.php. An authenticated user can inject script/HTML that is stored and later rendered to other users. Affected component: PHP-Fusion’s admin settings_main.php; vulnerability type: s...

CVE-2020-23179

A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...

CVE-2020-23178

An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out, allowing for an attacker to perform a session replay attack and impersonate the victim user...

CVE-2020-23178

CVE-2020-23178 affects PHP-Fusion 9.03.50. The issue is that session cookies are not deleted when a user logs out, enabling a session replay attack and impersonation of the victim. Public references (NVD/RH/CVE records) confirm the affected product and the underlying cause (logout cookie not clea...

Php-fusion PHP-Fusion 输入验证错误漏洞

Php-fusion PHP-Fusion is an open source lightweight content management system based on MySql and PHP from Malaysia's PHP-Fusion Php-fusion. The system contains modules for news, articles and forums. PHP-Fusion suffers from an injection vulnerability that stems from a flaw in a component in...

Php-fusion PHP-Fusion跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in /administration/settingsregistration.php in PHP-Fusion version 9.03.60, which can be exploited to execute arbitrary web script or HTML via the "registration" field...

Php-fusion PHP-Fusion 跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in administration/settingsmain.php in PHP-Fusion, which can be exploited to execute arbitrary web script or HTML via the "site footer" field...

Php-fusion PHP-Fusion 跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in /administration/settingsecurity.php in PHP-Fusion version 9.03.60, which can be exploited by an attacker to execute arbitrary Web script or HTML...

The vulnerability of the cmd_subsys.php component of the Nagios Fusion software, a visualization tool for IT infrastructure monitoring, allows a attacker to escalate their privileges or execute arbitrary code with root rights.

The vulnerability of the cmdsubsys.php component of the Nagios Fusion software, a visualization tool for IT infrastructure monitoring, is related to the lack of measures for cleaning input data. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary...

PHP-Fusion 安全漏洞

PHP-Fusion is a Malaysian company PHP-Fusion open source lightweight content management system based on MySql and PHP . The system contains modules such as news, articles and forums. PHP-Fusion suffers from a security vulnerability that stems from a session cookie not being deleted when a user lo...

Php-fusion PHP-Fusion 跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A reflective cross-site scripting vulnerability exists in /administration/theme.php in PHP-Fusion version 9.03.60, which can be exploited to execute arbitrary web script or HTML via the "Manage Theme" field...

Command Execution Vulnerability in International Web Site Navigation Systems

The international website navigation system uses domestic is thinkphp5 framework fusion. The international website navigation system exists command execution vulnerability, attackers can use the vulnerability to obtain server privileges...

How Cyber Sleuths Cracked an ATM Shimmer Gang

In 2015, police departments worldwide started finding ATMs compromised with advanced new "shimming" devices made to steal data from chip card transactions. Authorities in the United States and abroad had seized many of these shimmers, but for years couldnt decrypt the data on the devices. This is...

VMware Fusion 11.0.x < 11.5.7 Vulnerability (VMSA-2020-0029.1)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.0.x prior to 11.5.7. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300...

Nagios Fusion Remote Code Execution (CVE-2020-28905)

A remote code execution vulnerability exists in Nagios Fusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

The vulnerability of the cron/cmd_subsys.php implementation of the software for monitoring IT infrastructure by Nagios Fusion allows a perpetrator to escalate their privileges.

The vulnerability of the cron/cmdsubsys.php implementation of the Nagios Fusion IT infrastructure monitoring software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the ajaxhelper.php component of the Nagios Fusion software, which is used for visualizing the operational status of IT infrastructure, allows a hacker to gain access to user passwords.

The vulnerability of the ajaxhelper.php component of the Nagios Fusion software, which is used for visualizing the operational status of IT infrastructure, relates to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker, operating remotely, to ga...

Weak password vulnerability exists in Fusion Router K3C

Founded in 2009, Fusion Data Communication Technology Co., Ltd. is a technologically innovative enterprise that provides users with smart products and cloud services in the field of smart home. A weak password vulnerability exists in Fusion Router K3C. An attacker can utilize the weak password to...