CVE-2020-35687

Katalog CVE

CVSS 4.3 · Medium EPSS 1,4%

Kerentanan Cross-Site Request Forgery (CSRF) pada php-fusion phpfusion. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.

Rincian

Terbit di NVD

13 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-352: Cross-Site Request Forgery (CSRF)

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/PHPFusion/PHPFusion/issues/2347 exploit · issue tracking · advisory pihak ketiga
• https://www.exploit-db.com/exploits/49426 exploit · advisory pihak ketiga · vdb entry