CVE-2019-18873

FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin visits user information under "User Manager" in the control panel, the payload will execute. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. The problem is in admsession.php and admuser.php.

• CWE-78
• CWE-79

• https://github.com/fuzzlove/FUDforum-XSS-RCEExploit, Third Party Advisory
• https://sourceforge.net/p/fudforum/code/6321/Third Party Advisory
• https://github.com/fuzzlove/FUDforum-XSS-RCEExploit, Third Party Advisory
• https://sourceforge.net/p/fudforum/code/6321/Third Party Advisory

Published

Nov 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18868Blaauw Remote Kiln Control through v3.00r4 allows an unauthe…9.8
• CVE-2019-18869Leftover Debug Code in Blaauw Remote Kiln Control through v3…9.8
• CVE-2019-1887A vulnerability in the Session Initiation Protocol (SIP) pro…8.6
• CVE-2019-18870A path traversal via the iniFile parameter in excel.php in B…6.5
• CVE-2019-18871A path traversal in debug.php accessed via default.php in Bl…8.8
• CVE-2019-18872Weak password requirements in Blaauw Remote Kiln Control thr…7.5
• CVE-2019-18874psutil (aka python-psutil) through 5.6.5 can have a double f…7.5
• CVE-2019-1888A vulnerability in the Administration Web Interface of Cisco…7.2
• CVE-2019-18881WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflecte…6.1
• CVE-2019-18882WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-u…6.1
• CVE-2019-18883XSS exists in Lavalite CMS 5.7 via the admin/profile name or…6.1
• CVE-2019-18884index.php/team_members/add_team_member in RISE Ultimate Proj…8.8