CVE-2020-37137

CVE-2020-37137 affects PHP-Fusion 9.03.50. The vulnerability is a remote code execution in the add_panel_form() path where eval() executes unsanitized POST data (panel_content) sent to the panels.php admin endpoint. This can enable arbitrary code execution by an attacker who crafts panel_content ...