Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FusionPHP Fusion News管理员命令执行漏洞
Vulnerability Description
Fusion News 3.6.1版本存在漏洞。远程攻击者在管理员登陆时借助一个评论增加用户账号，该评论包含调用注册行为index.php的img bbcode标签。该漏洞在管理员的浏览器加载带有inm标签页面时执行。
CVSS Information
N/A
Vulnerability Type
N/A