CVE-2020-35687

PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.36% chance of exploitation in the next 30 days, 70th percentile

Published

2021-01-13

Updated

2024-08-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/49426

References

• CVE Record
• NVD entry

Related

• CVE-2020-35682
• CVE-2020-35693
• CVE-2020-35669
• CVE-2020-35700
• CVE-2020-35667
• CVE-2020-35702