CVE-2020-24949

This exploit leverages a command injection vulnerability in PHPFusion 9.03.50 via the `cat_id` parameter in the downloads module. It uses base64 encoding to bypass restrictions and executes a reverse shell payload if 'Allow PHP Execution' is enabled.

This exploit leverages a command injection vulnerability in PHPFusion 9.03.50 via the `cat_id` parameter in the downloads module. It uses base64-encoded payloads to bypass restrictions and execute arbitrary commands, leading to remote code execution.