Description

Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.

Remediation

References

CVE-2012-6043

Related Vulnerabilities

WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (3.34)

MySQL CVE-2020-14643 Vulnerability (CVE-2020-14643)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.8.7)

Oracle Application Server CVE-2009-1010 Vulnerability (CVE-2009-1010)

PHP Other Vulnerability (CVE-2015-8866)

Severity

Medium

Classification

CVE-2012-6043 CWE-707

Tags

Missing Update Known Vulnerabilities