Description

Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.

Remediation

References

CVE-2012-6043

Related Vulnerabilities

PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4812)

Moodle Missing Authorization Vulnerability (CVE-2019-14883)

WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.1.5)

WordPress 4.2.x Cross-Site Request Forgery (4.2 - 4.2.22)

GlassFish CVE-2016-5528 Vulnerability (CVE-2016-5528)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-6043