CVE-2021-28280

Description

References

• anotepad.com/notes/2skndayt · Exploit
• PHPFusion/PHPFusion commit 08d6c2e · Patch
• PHPFusion/PHPFusion commit 1c2b323 · Patch
• PHPFusion/PHPFusion commit da9f89a · Patch
• PHPFusion/PHPFusion commit fda266c · Patch

phpfusion의 다른 취약점

• CVE-2020-37152보통 6.1PHP-Fusion 9.03.50 panels.php is vulnerable to cross-site scripting (XSS) via the 'panel_content' POST parameter. The application fails to p…
• CVE-2020-37137심각 9.8PHP-Fusion 9.03.50 contains a remote code execution vulnerability in the 'add_panel_form()' function that allows attackers to execute arbitr…
• CVE-2023-53928보통 6.1PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG fil…
• CVE-2023-4480보통 5.5 Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted …
• CVE-2023-2453높음 8.8There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘requir…