CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 2CVE-2020-12706 – php-fusion 9.03.50 - Persistent Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2020-12706
Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the go parameter to faq/faq_admin.php or shoutbox_panel/shoutbox_admin.php Múltiples vulnerabilidades de tipo Cross-site scripting en PHP-Fusion versión 9.03.50, permiten a atacantes remotos inyectar script web o HTML arbitrario mediante el parámetro go en el archivo faq/faq_admin.php o shoutbox_panel/shoutbox_admin.php • https://www.exploit-db.com/exploits/48404 https://github.com/php-fusion/PHP-Fusion/commit/67273e546642d39451858a47296957807c9abd5f https://github.com/php-fusion/PHP-Fusion/issues/2306 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2020-12708
https://notcve.org/view.php?id=CVE-2020-12708
Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the cat_id parameter to downloads/downloads.php or article.php. NOTE: this might overlap CVE-2012-6043. Múltiples vulnerabilidades de tipo cross-site scripting en PHP-Fusion versión 9.03.50, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro cat_id en el archivo downloads/downloads.php o article.php. NOTA: esto podría solaparse al CVE-2012-6043. • https://github.com/php-fusion/PHP-Fusion/issues/2310 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 2CVE-2020-12461
https://notcve.org/view.php?id=CVE-2020-12461
PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter on the members.php members search page. This parameter allows for control over anything after the ORDER BY clause in the SQL query. PHP-Fusion versión 9.03.50, permite una inyección SQL porque el archivo maincore.php posee un mecanismo de protección insuficiente. Un atacante puede desarrollar una carga útil especialmente diseñada que se puede insertar en el parámetro GET sort_order en la página de búsqueda de miembros members.php. • https://github.com/php-fusion/PHP-Fusion/commit/79fe5ec1d5c75e017a6f42127741b9543658f822 https://github.com/php-fusion/PHP-Fusion/commit/858e43d7b0ea1897f76d5bcb3a1aed438132c0e2 https://github.com/php-fusion/PHP-Fusion/commit/d95cd4a2d22487723266c898b98e6be10754e03d https://github.com/php-fusion/PHP-Fusion/issues/2308 https://hackmd.io/lq7nA3ISSoeiGjiHVn5CoA • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2020-12438
https://notcve.org/view.php?id=CVE-2020-12438
An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT tags. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT tags. Existe una vulnerabilidad de tipo XSS en la página banners.php de PHP-Fusion versión 9.03.50. Esto puede ser explotado porque la única medida de seguridad usada contra un ataque de tipo XSS es el desmontaje de las etiquetas SCRIPT. • https://github.com/php-fusion/PHP-Fusion/commit/c36006f900d855f1173f81cea1a774295049f4d8 https://github.com/php-fusion/PHP-Fusion/issues/2307 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 7%CPEs: 1EXPL: 2CVE-2019-12099 – PHP-Fusion 9.03.00 - 'Edit Profile' Remote Code Execution
https://notcve.org/view.php?id=CVE-2019-12099
In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload. En PHP-Fusion versión 9.03.00, el archivo edit_profile.php permite a los usuarios autenticados remotamente ejecutar código arbitrario porque includes/dynamics/includes/form_fileinput.php y includes/classes/PHPFusion/Installer/Lib/Core.settings.inc maneja inapropiadamente archivos ejecutables durante la carga de avatar. • https://www.exploit-db.com/exploits/46839 https://github.com/php-fusion/PHP-Fusion/commit/943432028b9e674433bb3f2a128b2477134110e6 https://www.pentest.com.tr/exploits/PHP-Fusion-9-03-00-Edit-Profile-Remote-Code-Execution.html • CWE-434: Unrestricted Upload of File with Dangerous Type •