Lucene search
K

8 matches found

CNNVD
CNNVD
added 2021/07/07 12:0 a.m.2 views

PHP-Fusion 跨站脚本漏洞

PHPFusion is a lightweight open source content management system. PHPFusion version 9.03.60 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via 'New Shout' in /infusions/shoutboxpanel/shoutboxadmin.php...

4.8CVSS5.3AI score0.00235EPSS
Exploits1References2
CNVD
CNVD
added 2021/07/05 12:0 a.m.4 views

PHP-Fusion cross-site scripting vulnerability (CNVD-2021-48513)

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in /administration/settingsecurity.php in PHP-Fusion version 9.03.60, which can be exploited by an attacker to execute arbitrary Web script or HTML...

5.4CVSS6.3AI score0.00481EPSS
Exploits1References1
OSV
OSV
added 2021/07/02 6:15 p.m.3 views

CVE-2020-23185

A stored cross site scripting XSS vulnerability in /administration/settingsecurity.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4CVSS5.6AI score
Exploits0References1
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.2 views

Php-fusion PHP-Fusion 跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in /administration/settingsecurity.php in PHP-Fusion version 9.03.60, which can be exploited by an attacker to execute arbitrary Web script or HTML...

5.4CVSS5.5AI score0.00481EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.2 views

Php-fusion PHP-Fusion跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in /administration/settingsregistration.php in PHP-Fusion version 9.03.60, which can be exploited to execute arbitrary web script or HTML via the "registration" field...

5.4CVSS5.5AI score0.00481EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.2 views

Php-fusion PHP-Fusion 输入验证错误漏洞

Php-fusion PHP-Fusion is an open source lightweight content management system based on MySql and PHP from Malaysia's PHP-Fusion Php-fusion. The system contains modules for news, articles and forums. PHP-Fusion suffers from an injection vulnerability that stems from a flaw in a component in...

5.4CVSS5.8AI score0.00121EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/08/31 12:0 a.m.11 views

PHP-Fusion <= 9.03.60 XSS Vulnerability

PHP-Fusion is prone to a cross-site scripting XSS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

5.4CVSS6AI score0.00191EPSS
Exploits1References1
CNVD
CNVD
added 2020/08/27 12:0 a.m.1 views

PHP-Fusion Cross-Site Scripting Vulnerability (CNVD-2020-49953)

PHP-Fusion is a lightweight open source content management system. PHP-Fusion 9.03.60 suffers from a cross-site scripting vulnerability that can be exploited by attackers via infusions/memberpollpanel/polladmin.php...

5.4CVSS6.3AI score0.00191EPSS
Exploits1References1
Rows per page
Query Builder