CVE-2019-18873 EXPLOIT
9.0
CRITICAL · CVSS 3.1 · EPSS 8.2% (pctl 95)
Patch early
A public exploit exists.
Description
FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin visits user information under "User Manager" in the control panel, the payload will execute. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. The problem is in admsession.php and admuser.php.
Scoring
| CVSS | 9.0 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H |
| EPSS | 8.15% — more likely to be exploited than 95% of all CVEs |
| Weakness | CWE-78 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2019-11-12 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| fudforum | fudforum |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | FUDForum 3.0.9 - Remote Code Execution | 2019-11-13 |
References
→ the Explorer · watch your stack · NVD