CVE-2020-24949

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution RCE...

CVE-2020-24949: Undefined Security Weakness

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution RCE...

PT-2020-15866

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.50 Description The issue allows an authenticated user to send a crafted request to the server, enabling them to perform remote command execution. This is a result of a privilege escalation flaw in the...

CVE-2020-12708

Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the catid parameter to downloads/downloads.php or article.php. NOTE: this might overlap CVE-2012-6043...

CVE-2020-12708: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the catid parameter to downloads/downloads.php or article.php. NOTE: this might overlap CVE-2012-6043...

PT-2020-13220

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.50 Description The issue allows remote attackers to inject arbitrary web script or HTML via the cat id parameter to "downloads/downloads.php" or "article.php", potentially leading to cross-site scripting attacks...