CVE-2021-37454

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the line name stored...

CVE-2021-37454

CVE-2021-37454 affects NCH Axon PBX v2.22 and earlier. The issue is a stored XSS in the line name field, caused by insufficient filtering of special characters, enabling injection of client‑side scripts. Reported metrics indicate low to medium impact depending on vector/privileges, with user inte...

CVE-2021-37455

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan stored...

CVE-2021-37455

CVE-2021-37455 describes a stored cross-site scripting (XSS) vulnerability in NCH Axon PBX, affecting v2.22 and earlier. The issue arises in the outbound dialing plan, where user-supplied data is not properly filtered for special characters, enabling execution of client-side code. The connected s...

CVE-2021-37456

NCH Axon PBX v2.22 and earlier are vulnerable to a stored XSS flaw in the blacklist IP address filtering, as described in CVE-2021-37456. The root cause is improper filtering of special characters in input data, enabling attackers to execute client-side code. Exploitation details are not provided...

CVE-2021-37456

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

CVE-2021-37457

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the SipRule field stored...

CVE-2021-37457

CVE-2021-37457 affects NCH Axon PBX v2.22 and earlier. The vulnerability is a stored Cross Site Scripting (XSS) via the SipRule field, caused by failure to properly filter incoming data for special characters. Documented impact is client-side code execution in affected deployments. Public exploit...

CVE-2021-37458

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the primary phone field stored...

CVE-2021-37458

CVE-2021-37458 describes a stored XSS vulnerability in NCH Axon PBX, affecting v2.22 and earlier, via the primary phone field. The underlying issue is failure to properly filter input in that field, enabling client‑side code execution. Data provided lists affected product and version, and states ...

CVE-2021-37459

CVE-2021-37459 affects NCH Axon PBX (v2.22 and earlier). The vulnerability is a stored cross-site scripting (XSS) flaw originating in the product’s customer name field, which fails to properly filter special characters, enabling client-side script execution. The issue is documented across multipl...

CVE-2021-37459

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the customer name field stored...

CVE-2021-37460

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /planprop?id= reflected...

CVE-2021-37460

The CVE-2021-37460 issue affects NCH Axon PBX, specifically versions v2.22 and earlier. It is a reflected Cross-Site Scripting (XSS) vulnerability reachable via the /planprop?id= parameter, caused by inadequate filtering of input data. The consequence is client-side code execution if an attacker ...

CVE-2021-37461

CVE-2021-37461 affects NCH Axon PBX, a virtual telephone switch, with a reflected XSS in /extensionsinstruction?id= where input is not properly filtered of special characters. Affects v2.22 and earlier. The provided documents do not specify a remediation version or patch status, exploit details, ...

CVE-2021-37461

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= reflected...

CVE-2021-37462

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= reflected...

CVE-2021-37462

CVE-2021-37462 describes a cross-site scripting (XSS) vulnerability in NCH Axon PBX, affecting v2.22 and earlier. The issue is a reflected XSS via the /ipblacklist?errorip= parameter. The connected documents confirm the affected product and the vulnerability pattern but do not provide details on ...

NCH Axon PBX 跨站脚本漏洞

NCH Axon PBX is a set of virtual telephone switch software used in a business environment. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the fact that the product's customer name does not properly filter special characters in the input data and can be exploited to...

NCH Axon PBX 跨站脚本漏洞

NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the product's blacklist IP address failing to properly filter special characters in input data, and could be exploited by...