CVE-2019-18839

CVE-2019-18839 affects FUDForum 3.0.9. The vulnerability is a Stored XSS through the nlogin parameter, which can lead to remote code execution. An attacker can abuse a normal user account to fully compromise the system by sending a POST request; when an admin views the user information, the paylo...

FUDForum 3.0.9 Code Execution / Cross Site Scripting

// Exploit Title : FUDForum 3.0.9 - Stored XSS / Remote Code Execution // Date : 10/26/19 // Exploit Author : liquidsky JMcPeters // Vulnerable Software : FUDForum 3.0.9 // Vendor Homepage : https://sourceforge.net/projects/fudforum/ // Version : 3.0.9 // Software Link :...

Exploit for OS Command Injection in Fudforum

FUDforum-XSS-RCE FUDForum 3.0.9 - XSS / Remote Code Execution...