8 matches found
CVE-2019-16966
An issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x before 15.0.8.21 for FreePBX 14.0.10.3. In the Contactmanager class html\admin\modules\contactmanager\Contactmanager.class.php, an unsanitized group variable coming from the URL is reflected in HTML o...
CVE-2017-16966
This CVE entry is rejected/not used as stated in the Initial Description.
CVE-2019-16966
CVE-2019-16966 affects FreePBX Contactmanager components prior to specific fixed versions: Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x before 15.0.8.21. The vulnerability arises from an unsanitized group variable from the URL reflected in HTML in two places within Contac...
CVE-2018-16966
creationtimestamp| type| source ---|---|--- 2019-04-16 00:27:14+00:00| seen| https://t.me/cibsecurity/3734...
CVE-2018-16966
There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wpfilemanagerroot publicpath parameter...
CVE-2018-16966
CVE-2018-16966 concerns the WordPress plugin “mndpsingh287 File Manager” (v3.0) where a CSRF vulnerability exists via the page=wp_file_manager_root public_path parameter. The issue allows an attacker to trigger actions on behalf of a logged-in user (requires user interaction per CVSS3) without au...