CVE-2019-16977

In FusionPBX up to 4.5.7, the file app\extensions\extensionimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...

CVE-2018-16977

Monstra CMS V3.0.4 has an information leakage risk e.g., PATH, DOCUMENTROOT, and SERVERADMIN in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php...

CVE-2019-16977

creationtimestamp| type| source ---|---|--- 2024-01-27 08:41:14+00:00| seen| https://t.me/ctinow/174681...

CVE-2020-16977

CVE-2020-16977 describes a remote code execution vulnerability in Visual Studio Code arising when the Python extension loads a Jupyter notebook file. An attacker who can entice a user to open a specially crafted notebook could run arbitrary code in the user’s context, potentially gaining full sys...

CVE-2017-16977

CVE-2017-16977 is rejected/not used; this CVE ID is not associated with an active vulnerability entry.

CVE-2017-16977

...

CVE-2019-16977

In FusionPBX up to 4.5.7, the file app\extensions\extensionimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...

CVE-2019-16977

CVE-2019-16977 affects FusionPBX

CVE-2018-16977

Monstra CMS v3.0.4 is affected by an information disclosure vulnerability in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php that can expose PATH, DOCUMENT_ROOT, and SERVER_ADMIN. The root cause is improper handling in the exception view, leading to leakage of server/environmen...