Description

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature.

Remediation

References

CVE-2021-3172

Related Vulnerabilities

WordPress 4.9.x Arbitrary File Deletion Vulnerability (4.9 - 4.9.6)

Oracle JRE CVE-2012-0502 Vulnerability (CVE-2012-0502)

Oracle JRE CVE-2017-10388 Vulnerability (CVE-2017-10388)

Jboss EAP XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2018-1000632)

WordPress Plugin Plug-N-Edit Full Drag & Drop HTML Visual Editor with Web Page Builder WYSIWYG Cross-Site Scripting (5.2.0)

Severity

High

Classification

CVE-2021-3172 CWE-732 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Tags

Missing Update Known Vulnerabilities