medium4.3Public exploit code
CVE-2020-35687
PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Fusion CMS 9.03.90 - Cross-Site Request Forgery (Delete admin shoutbox message)2021-01-15 · webapps · php
Impact
PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php-Fusion | Phpfusion | Version 9.03.90 |