CVE-2020-11766

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...

AvantFAX Cross-Site Scripting Vulnerability

AvantFAX is a suite of software for viewing and sending faxes. The software supports user management, permission management, fax line management and fax category management. A cross-site scripting vulnerability exists in AvantFAX version 3.3.3. A remote attacker can exploit this vulnerability by...

CVE-2017-18024

AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1...

CVE-2017-18024

AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1...

Default credentials

AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1...

CVE-2017-18024

AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1...

CVE-2017-18024

AvantFAX 3.3.3 is affected by a cross-site scripting (XSS) vulnerability in the web UI: an arbitrary parameter name passed to the default URI can include a SCRIPT tag, enabling arbitrary JavaScript in the victim’s browser. Impact includes potential session hijacking, defacement, or data leakage a...

AvantFAX 3.3.3 Cross Site Scripting

Title: AvantFAX 3.3.3 - XSS Author: Nassim Asrir Contact: [email protected] Vendor: https://www.officetracker.com/ CVE: CVE-2017-18024 Description AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and...