Privilege escalation

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution RCE...

CVE-2020-24949

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution RCE...

CVE-2020-24949

CVE-2020-24949 affects PHP-Fusion 9.03.50 in downloads/downloads.php, where an authenticated non-admin user can send a crafted request to trigger remote code execution. The underlying issue enables arbitrary code execution on the server, with the vulnerability classified as high severity (CVSS v3...

PHP-Fusion <= 9.03.60 XSS Vulnerability

PHP-Fusion is prone to a cross-site scripting XSS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

PHP-Fusion Cross-Site Scripting Vulnerability (CNVD-2020-49953)

PHP-Fusion is a lightweight open source content management system. PHP-Fusion 9.03.60 suffers from a cross-site scripting vulnerability that can be exploited by attackers via infusions/memberpollpanel/polladmin.php...

CVE-2020-23658

PHP-Fusion 9.03.60 is affected by Cross Site Scripting XSS via infusions/memberpollpanel/polladmin.php...

CVE-2020-23658

PHP-Fusion 9.03.60 is affected by Cross Site Scripting XSS via infusions/memberpollpanel/polladmin.php...

Cross site scripting

PHP-Fusion 9.03.60 is affected by Cross Site Scripting XSS via infusions/memberpollpanel/polladmin.php...

CVE-2020-23658

Summary: CVE-2020-23658 affects PHP-Fusion 9.03.60 with a Cross Site Scripting (XSS) vulnerability exploitable via infusions/member_poll_panel/poll_admin.php. Affected software: PHP-Fusion 9.03.60 (admin/poll panel infusion). Root cause / impact: XSS vulnerability; impact details state confidenti...

CVE-2020-23658

PHP-Fusion 9.03.60 is affected by Cross Site Scripting XSS via infusions/memberpollpanel/polladmin.php...

PHP-Fusion < 9.03.30 Multiple XSS Vulnerabilities

PHP-Fusion is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

The vulnerability of the Mobile Service component of the BI Publisher software platform from Oracle Fusion Middleware relates to insufficient validation of input data. This allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Mobile Service component in the BI Publisher reporting tool, a software platform developed by Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

Security Bulletin: Publicly disclosed vulnerability in Oracle Outside In Technology used by IBM FileNet Content Manager

Summary Multiple vulnerabilities may affect Oracle Outside In Technology OIT Version 8.5.3 used by IBM FileNet Content Manager. Oracle OIT issues disclosed in the Oracle October 2018 Critical Patch Update. Vulnerability Details CVEID: CVE-2018-18224 DESCRIPTION: An unspecified vulnerability in...

CVE-2020-17450

PHP-Fusion 9.03 allows XSS on the preview page...

CVE-2020-17450

PHP-Fusion 9.03 allows XSS on the preview page...

CVE-2020-17449

PHP-Fusion 9.03 allows XSS via the errorlog file...

CVE-2020-17449

PHP-Fusion 9.03 allows XSS via the errorlog file...

Design/Logic Flaw

PHP-Fusion 9.03 allows XSS via the errorlog file...

Design/Logic Flaw

PHP-Fusion 9.03 allows XSS on the preview page...

CVE-2020-17450

PHP-Fusion 9.03 allows XSS on the preview page...