EDB-49426
PoCPHP-Fusion CMS 9.03.90 - Cross-Site Request Forgery (Delete admin shoutbox message)
view exploit source exploit_dbtype webappsauthor Mohamed Oosmanpublished 2021-01-15catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-35687US | medium4.3 | Exploit | ||
PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan