812 matches found
Cross site scripting
PHP-Fusion 9.03.60 is affected by Cross Site Scripting XSS via infusions/memberpollpanel/polladmin.php...
CVE-2020-23658
PHP-Fusion 9.03.60 is affected by Cross Site Scripting XSS via infusions/memberpollpanel/polladmin.php...
CVE-2020-23658
Summary: CVE-2020-23658 affects PHP-Fusion 9.03.60 with a Cross Site Scripting (XSS) vulnerability exploitable via infusions/member_poll_panel/poll_admin.php. Affected software: PHP-Fusion 9.03.60 (admin/poll panel infusion). Root cause / impact: XSS vulnerability; impact details state confidenti...
PHP-Fusion < 9.03.30 Multiple XSS Vulnerabilities
PHP-Fusion is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...
CVE-2020-17449
PHP-Fusion 9.03 allows XSS via the errorlog file...
CVE-2020-17450
PHP-Fusion 9.03 allows XSS on the preview page...
CVE-2020-17449
PHP-Fusion 9.03 allows XSS via the errorlog file...
Design/Logic Flaw
PHP-Fusion 9.03 allows XSS via the errorlog file...
Design/Logic Flaw
PHP-Fusion 9.03 allows XSS on the preview page...
CVE-2020-17450
PHP-Fusion 9.03 is affected by cross-site scripting on the preview page (CVE-2020-17450). The OpenVAS entry flags multiple XSS vulnerabilities in PHP-Fusion, specifically noting a version line that includes
CVE-2020-17450
PHP-Fusion 9.03 allows XSS on the preview page...
CVE-2020-17449
PHP-Fusion 9.03 allows XSS via the errorlog file...
CVE-2020-17449
PHP-Fusion 9.03 is affected by CVE-2020-17449, a cross-site scripting (XSS) vulnerability that can be triggered via the error_log file. The NVD lists CVSS v3.1 base score 5.4 (MEDIUM) with network vector, low privileges, user interaction required, and changed scope; CVSS v2 is 3.5 (LOW). No concr...
PHP-Fusion 9.03.60 - PHP Object Injection
PHP-Fusion version 9.03.60 suffers from a PHP object injection vulnerability. Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.p...
PHP Fusion SQL injection
An SQL injection vulnerability exists in the PHP Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
PHP-Fusion 9.03.60 PHP Object Injection
Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.php Version: v9.03.60 Description: PHP Object Injection to SQL injection pre-au...
PHP-Fusion 9.03.60 - PHP Object Injection Exploit
Exploit for php platform in category web applications Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.php Version: v9.03.60 Description: PHP...
PHP-Fusion 9.03.60 - PHP Object Injection
Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.php Version: v9.03.60 Description: PHP Object Injection to SQL injection pre-au...
PHP-Fusion Cross-Site Scripting Vulnerability (CNVD-2020-51759)
PHP-Fusion is a Malaysian company PHP-Fusion open source lightweight content management system based on MySql and PHP . The system contains modules such as news, articles and forums. A cross-site scripting vulnerability exists in PHP-Fusion version 9.03.60. The vulnerability stems from the WEB...