Описание
The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:php-fusion:php-fusion:9.03.60:*:*:*:*:*:*:*
EPSS
Процентиль: 31%
0.00121
Низкий
5.4 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-601
Связанные уязвимости
github
больше 3 лет назад
The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel.
EPSS
Процентиль: 31%
0.00121
Низкий
5.4 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-601