CVE-2015-8375

Description

References

• cve.killedkenny.io/cve/CVE-2015-8375 · Third Party Advisory
• openwall.com/lists/oss-security/2015/11/29/4 · Exploit
• gist.github.com/bscarvell/57f82000bf823071404e · Exploit
• php-fusion/PHP-Fusion commit f1a5fce · Patch

Weitere Schwachstellen in php-fusion

• CVE-2021-3172HOCH 8.1An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling fe…
• CVE-2020-23702MITTEL 4.8Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.
• CVE-2020-23185MITTEL 5.4A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP-Fusion 9.03.60 allows authenticated attacke…
• CVE-2020-23184MITTEL 5.4A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of PHP-Fusion 9.03.60 allows authenticated at…
• CVE-2020-23182MITTEL 5.4The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to m…