FUDForum Cross-Site Scripting Vulnerability

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. FUDForum 3.0.9 suffers from a stored cross-site scripting vulnerability that can be exploited by an attacker to achieve remote code execution via the nlogin parameter...

CVE-2019-18839

FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP file...

PT-2019-15693

Name of the Vulnerable Software and Affected Versions FUDForum version 3.0.9 Description The issue allows for Stored XSS via the nlogin parameter, potentially resulting in remote code execution. An attacker can use a user account to fully compromise the system by sending a POST request. When the...

CVE-2019-18839: Improper Neutralization of Special Elements used in an OS Command

FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP file...