CVE-2020-35687: CSRF
PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35687?
CVE-2020-35687 refers to a vulnerability in PHPFusion version 9.03.90 that allows an attacker to perform a CSRF attack leading to the deletion of all shoutbox messages.
How severe is CVE-2020-35687?
CVE-2020-35687 has a severity rating of 4.3, which is considered medium.
What software version is affected by CVE-2020-35687?
PHPFusion version 9.03.90 is affected by CVE-2020-35687.
Are there any references available for CVE-2020-35687?
Yes, you can find references for CVE-2020-35687 at the following links: [GitHub issue](https://github.com/PHPFusion/PHPFusion/issues/2347) and [Exploit-DB](https://www.exploit-db.com/exploits/49426).
Is there a fix available for CVE-2020-35687?
At the time of writing, there is no official fix available for CVE-2020-35687. It is recommended to update to a newer version of PHPFusion when a patch becomes available.