Lucene search
+L

7 matches found

CNVD
CNVD
•added 2021/07/05 12:00 a.m.•17 views

PHP-Fusion Cross-Site Scripting Vulnerability (CNVD-2021-48510)

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in administration/settingsmain.php in PHP-Fusion, which can be exploited to execute arbitrary web script or HTML via the "site footer" field...

5.4CVSS6AI score0.00472EPSS
SaveExploits1References1
OSV
OSV
•added 2021/07/02 6:15 p.m.•16 views

CVE-2020-23179

A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...

5.4CVSS5.8AI score0.00472EPSS
SaveExploits1References1
Mend
Mend
•added 2021/07/02 5:51 p.m.•1 views

CVE-2020-23179

A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...

5.4CVSS0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/02 12:00 a.m.•6 views

CVE-2020-23179: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...

5.4CVSS5.6AI score0.00472EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/07/02 12:00 a.m.•22 views

Php-fusion PHP-Fusion 跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in administration/settingsmain.php in PHP-Fusion, which can be exploited to execute arbitrary web script or HTML via the "site footer" field...

5.4CVSS5.5AI score0.00472EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/05/14 12:00 a.m.•2 views

PT-2020-6332

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.50 Description A stored cross site scripting XSS vulnerability in the administration/settings main.php file allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the...

5.4CVSS0.00472EPSS
SaveExploits1References6
CNVD
CNVD
•added 2017/08/31 12:00 a.m.•15 views

BlackCat CMS Cross-Site Scripting Vulnerability (CNVD-2017-24888)

BlackCat CMS is a PHP5, HTML5 content management system. A cross-site scripting vulnerability exists in the backend/settings/ajaxsavesettings.php file in BlackCat CMS, which can be exploited by remote attackers via the site title or site footer fields...

5.4CVSS5.3AI score0.0058EPSS
SaveExploits0References1
Rows per page
Query Builder