EDB-36541

functional

PHP-Fusion 7.2.4 - 'downloads.php' Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor Am!rpublished 2012-01-10catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-6043US	medium4.3	1.63% (76th)	Exploit	2012-11-26
Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.