Lucene search

K
cvelistMitreCVELIST:CVE-2024-28722
HistoryApr 22, 2024 - 12:00 a.m.

CVE-2024-28722

2024-04-2200:00:00
mitre
www.cve.org
5
cross site scripting
innovaphone mypbx
remote attacker
arbitrary code execution
query parameter
cmd0/xml_modes.xml endpoint

AI Score

7.2

Confidence

High

EPSS

0

Percentile

15.5%

Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xml_modes.xml endpoint

AI Score

7.2

Confidence

High

EPSS

0

Percentile

15.5%

Related for CVELIST:CVE-2024-28722