121 matches found
CVE-2021-44937
glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...
Design/Logic Flaw
glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...
Information disclosure
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...
CVE-2021-44937
glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...
CVE-2021-44937
CVE-2021-44937 affects glFusion CMS v1.7.9. Descriptions across multiple sources state an arbitrary user registration vulnerability in /public_html/users.php, allowing attackers to register using any user’s mailbox and observe that the mailbox becomes occupied. The root cause is insufficient vali...
CVE-2021-44935
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...
CVE-2021-44935
CVE-2021-44935 affects glFusion CMS v1.7.9. The vulnerability is an access control error in /public_html/comment.php that enables an arbitrary user impersonation attack, with remote, no-interaction exploitation reported by the initial sources. The available documents do not provide a remediation ...
GlFusion Cms 授权问题漏洞
glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to arbitrary user registration, which can be exploited by attackers to register using any user's email address...
PT-2021-24185 · Unknown · Glfusion Cms
Name of the Vulnerable Software and Affected Versions: glFusion CMS version 1.7.9 Description: The issue is related to an access control vulnerability. It can be exploited via the "/public html/users.php" API endpoint. Recommendations: For glFusion CMS version 1.7.9, update to a version that fixe...
GlFusion Cms 访问控制错误漏洞
glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an access control error, which can be exploited by attackers via /publichtml/comment.php...
GlFusion Cms 跨站请求伪造漏洞
GlFusion Cms is a content management and publishing system. A security vulnerability exists in glFusion CMS v1.7.9 that allows attackers to conduct csrf attacks via /publichtml/admin/plugins/badbehavior2/blacklist.php...
GlFusion Cms 授权问题漏洞
GlFusion Cms is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an authorization issue, which can be exploited by attackers via /publichtml/users.php...
glFusion 1.3.0 (search.php, cat_id param) - SQL Injection
No description provided by source...
glFusion 1.2.2 - Multiple XSS Vulnerabilities
No description provided by source...
glFusion 1.1 Anonymous Comment 'username' Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33683/info glFusion is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...
glFusion <= 1.1.2 COM_applyFilter()/cookies Blind SQL Injection Exploit
No description provided by source. ?php / glFusion = 1.1.2 COMapplyFilter/cookies remote blind sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: Page created in seconds by glFusion +RSS Found anoth...
glfusion cms 1.2.1 - Stored XSS via img tag
No description provided by source. Exploit Title: glfusion CMS 1.2.1 stored XSS via img tag Date: 14-1-2010 Author: Saif El-Sherei Software Link: www.glfusion.org/filemgmt/viewcat.php?cid=1http://php.opensourcecms.com/scripts/redirect/download.php?id=33 Version: 1.2.1 Tested on: Firefox 3.0.15...
glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit
No description provided by source. ?php / glFusion = 1.1.2 COMapplyFilter/order sql injection exploit by Nine:Situations:Group::bookoo working against Mysql = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: Page created in...
CVE-2013-1466
Multiple cross-site scripting XSS vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the 1 subject parameter to profiles.php; 2 address1, 3 address2, 4 calendartype, 5 city, 6 state, 7 title, 8 url, or 9 zipcode parameter to...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the 1 subject parameter to profiles.php; 2 address1, 3 address2, 4 calendartype, 5 city, 6 state, 7 title, 8 url, or 9 zipcode parameter to...