Description

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature.

Remediation

References

CVE-2021-3172

Related Vulnerabilities

EspoCRM Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2026-92298)

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-46242)

WordPress Plugin WooCommerce-Store Exporter Multiple Cross-Site Scripting Vulnerabilities (1.7.5)

XWiki Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-50719)

Oracle Database Server CVE-2006-3703 Vulnerability (CVE-2006-3703)

Severity

High

Classification

CVE-2021-3172 CWE-732 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Tags

Missing Update Known Vulnerabilities