CVE-2020-37152

概要

参考情報

• exploit-db.com/exploits/48299 · Not Applicable
• php-fusion.co.uk · Product
• vulncheck.com/advisories/php-fusion-panelsphp-cross-site-scripting-xss · Broken Link

phpfusion のその他の脆弱性

• CVE-2020-37137緊急 9.8PHP-Fusion 9.03.50 contains a remote code execution vulnerability in the 'add_panel_form()' function that allows attackers to execute arbitr…
• CVE-2023-53928中 6.1PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG fil…
• CVE-2023-4480中 5.5 Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted …
• CVE-2023-2453高 8.8There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘requir…
• CVE-2022-3152高 8.8Unverified Password Change in GitHub repository phpfusion/phpfusion prior to 9.10.20.