CVE-2023-0480

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. This is possible because the application is vulnerable to CSRF...

CVE-2023-0486

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's administrator account via a malicious link. This is possible because the application is vulnerable to XSS...

CVE-2023-0486

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's administrator account via a malicious link. This is possible because the application is vulnerable to XSS...

Cross site scripting

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's administrator account via a malicious link. This is possible because the application is vulnerable to XSS...

Cross site request forgery (csrf)

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. This is possible because the application is vulnerable to CSRF...

VitalPBX 跨站请求伪造漏洞

VitalPBX is an Asterisk-based unified communications PBX system. A security vulnerability exists in VitalPBX version 3.2.3-8 that stems from the program's susceptibility to CSRF attacks, which can be exploited by an attacker to gain access to an instance administrator's account...

PT-2023-16298 · Vitalpbx · Vitalpbx

Name of the Vulnerable Software and Affected Versions: VitalPBX version 3.2.3-8 Description: The issue allows an unauthenticated external attacker to obtain the instance's administrator account via a malicious link. This is possible because the application is vulnerable to cross-site scripting XS...

PT-2023-16293 · Vitalpbx · Vitalpbx

Name of the Vulnerable Software and Affected Versions: VitalPBX version 3.2.3-8 Description: The issue allows an unauthenticated external attacker to obtain the instance administrator's account due to the application being vulnerable to CSRF. Recommendations: For VitalPBX version 3.2.3-8, update ...