CVE-2020-24949

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform…

published September 3, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
68%
Percentile
99.3
In the wild
Unconfirmed
What it is

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.67516 · 99.3th percentile
Published
2020-09-03T13:51Z
EPSS history
Timeline
  • 03 SEP 13:51Z
    Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform…
    cvelistv5