199 matches found
CVE-2023-49954.github.io
SQL Injection in 3CX CRM Integration For the CRM integration, 3CX ships templates for connecting to various databases. In these templates, placeholders FirstName,SearchText,Email are used to populate the queries. User input is not sanitized and thus enables SQL injections. Affected Versions no...
MINI-3CXV-875P-RW48
Bulletin has no description...
MINI-3CX2-658G-VG2H
Bulletin has no description...
MINI-3CXH-WWRF-5MRJ
Bulletin has no description...
MINI-3CX3-8447-FF8R
Bulletin has no description...
3CX Phone System - Installer Page Exposure Detection
A 3CX Phone System installer or setup wizard page is publicly accessible. This web-based configuration tool is used for initial PBX setup including admin credential creation, SIP trunk configuration, license activation, and network settings. Exposure of this page allows unauthenticated attackers ...
3CX Management Console - Local File Inclusion Detection
3CX Management Console is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Management Console is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...
3CX Phone System Web Client Management Console - Panel Detect
3CX Phone System Web Client Management Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Phone System Web Client Management Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...
3CX Config - File Disclosure Detection
3CX Configuration file was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Configuration file was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': '3CX Config - File Disclosure Detection',...
3CX Phone System Management Console - Panel Detect
3CX Phone System Management Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Phone System Management Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': '3CX Phone...
CVE-2023-49954
The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address...
EUVD-2008-6854
Malware in sbrugna...
EUVD-2019-4701
Malware in sbrugna...
EUVD-2008-6855
Malware in sbrugna...
EUVD-2008-6856
Malware in sbrugna...
EUVD-2018-19371
Malware in sbrugna...
EUVD-2017-6815
Malware in sbrugna...
EUVD-2018-6789
Malware in sbrugna...