CVE-2020-17450

PHP-Fusion 9.03 allows XSS on the preview page...

CVE-2020-17449

PHP-Fusion 9.03 allows XSS via the errorlog file...

CVE-2020-17449

PHP-Fusion 9.03 allows XSS via the errorlog file...

Design/Logic Flaw

PHP-Fusion 9.03 allows XSS via the errorlog file...

Design/Logic Flaw

PHP-Fusion 9.03 allows XSS on the preview page...

CVE-2020-17450

PHP-Fusion 9.03 allows XSS on the preview page...

CVE-2020-17450

PHP-Fusion 9.03 is affected by cross-site scripting on the preview page (CVE-2020-17450). The OpenVAS entry flags multiple XSS vulnerabilities in PHP-Fusion, specifically noting a version line that includes

CVE-2020-17449

PHP-Fusion 9.03 is affected by CVE-2020-17449, a cross-site scripting (XSS) vulnerability that can be triggered via the error_log file. The NVD lists CVSS v3.1 base score 5.4 (MEDIUM) with network vector, low privileges, user interaction required, and changed scope; CVSS v2 is 3.5 (LOW). No concr...

CVE-2020-17449

PHP-Fusion 9.03 allows XSS via the errorlog file...

CVE-2020-17450: Improper Neutralization of Input During Web Page Generation

PHP-Fusion 9.03 allows XSS on the preview page...

CVE-2020-17449: Improper Neutralization of Input During Web Page Generation

PHP-Fusion 9.03 allows XSS via the errorlog file...

PHP-Fusion 9.03.60 - PHP Object Injection

PHP-Fusion version 9.03.60 suffers from a PHP object injection vulnerability. Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.p...

PHP-Fusion 9.03.60 PHP Object Injection

Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.php Version: v9.03.60 Description: PHP Object Injection to SQL injection pre-au...

PHP Fusion SQL injection

An SQL injection vulnerability exists in the PHP Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

PHP-Fusion 9.03.60 - PHP Object Injection Exploit

Exploit for php platform in category web applications Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.php Version: v9.03.60 Description: PHP...

PHP-Fusion 9.03.60 - PHP Object Injection

Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.php Version: v9.03.60 Description: PHP Object Injection to SQL injection pre-au...

PHP-Fusion Cross-Site Scripting Vulnerability (CNVD-2020-51759)

PHP-Fusion is a Malaysian company PHP-Fusion open source lightweight content management system based on MySql and PHP . The system contains modules such as news, articles and forums. A cross-site scripting vulnerability exists in PHP-Fusion version 9.03.60. The vulnerability stems from the WEB...

CVE-2020-15041

PHP-Fusion 9.03.60 allows XSS via the administration/sitelinks.php Add Site Link field...

CVE-2020-15041

PHP-Fusion 9.03.60 allows XSS via the administration/sitelinks.php Add Site Link field...

CVE-2020-15041

PHP-Fusion 9.03.60 allows XSS via the administration/sitelinks.php Add Site Link field...