CVE-2021-3172

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature...

CVE-2021-3172

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature...

Design/Logic Flaw

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature...

CVE-2021-3172

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature...

CVE-2020-35687

CVE-2020-35687 affects PHPFusion CMS 9.03.90. A CSRF vulnerability in the shoutbox management allows an attacker to delete all shoutbox messages on behalf of a logged-in victim. Public PoCs/exploits exist (e.g., PacketStorm, Exploit-DB) showing a GET request triggering deletion via shoutbox_archi...