CVE-2020-35687

PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
VendorProductVersion
php-fusionphpfusion
9.03.90
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/PHPFusion/PHPFusion/issues/2347
https://www.exploit-db.com/exploits/49426
https://github.com/PHPFusion/PHPFusion/issues/2347
https://www.exploit-db.com/exploits/49426