CVE-2009-4038

2022-10-0316:24:03

mitre

www.cve.org

cross-site scripting

nch software

axon virtual pbx

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

osvdb.org/59871

secunia.com/advisories/37157