CVE-2019-12099

概要

参考情報

• php-fusion/PHP-Fusion commit 9434320 · Patch
• exploit-db.com/exploits/46839 · Exploit
• pentest.com.tr/exploits/PHP-Fusion-9-03-00-Edit-Profile-Remote-Code-Execution.html · Exploit

php-fusion のその他の脆弱性

• CVE-2021-3172高 8.1An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling fe…
• CVE-2020-23702中 4.8Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.
• CVE-2020-23185中 5.4A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP-Fusion 9.03.60 allows authenticated attacke…
• CVE-2020-23184中 5.4A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of PHP-Fusion 9.03.60 allows authenticated at…
• CVE-2020-23182中 5.4The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to m…