CVE-2022-34562

Description

References

• mohammedshine.github.io/vulnresearch.html · Third Party Advisory
• v4.phpfox.com · Broken Link

Altre vulnerabilità di phpfox

• CVE-2022-34561MEDIO 4.3A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload …
• CVE-2022-34560ALTO 7.1A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload …
• CVE-2023-46817CRITICO 9.8An issue was discovered in phpFox before 4.8.14. The url request parameter passed to the /core/redirect route is not properly sanitized befo…
• CVE-2013-7196MEDIO 5.5static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on…
• CVE-2013-7195MEDIO 5.5PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request th…