FreeBPX 17.0.x < 17.0.23 Authentication Bypass

According to its self-reported version number, the FreePBOX application running on the remote host is prior to 16.0.44 or 17.x prior to 17.0.23. It is, therefore, affected by an authentication bypass when providing an Authorization header with an arbitrary value, a session is associated with the...

EUVD-2021-34122

Malicious code in bioql PyPI...

CVE-2021-4283

A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of the file views/ssettings.php of the component Settings Handler. The manipulation of the argument key leads to cross site scripting. The attack may be launched...

CVE-2021-4283

A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of the file views/ssettings.php of the component Settings Handler. The manipulation of the argument key leads to cross site scripting. The attack may be launched...

Cross site scripting

A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of the file views/ssettings.php of the component Settings Handler. The manipulation of the argument key leads to cross site scripting. The attack may be launched...

CVE-2021-4283

CVE-2021-4283 affects FreePBX voicemail, specifically the Settings Handler’s file views/ssettings.php. The vulnerability arises from manipulating the key argument, enabling cross-site scripting. Exploitation could be remote. A patch is available in version 14.0.6.25 (patch identifier ffce48820160...

CVE-2021-4283 FreeBPX voicemail Settings ssettings.php cross site scripting

A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of the file views/ssettings.php of the component Settings Handler. The manipulation of the argument key leads to cross site scripting. The attack may be launched...

PT-2022-11699 · Freebpx · Freebpx

Name of the Vulnerable Software and Affected Versions: FreeBPX voicemail versions prior to 14.0.6.25 Description: A vulnerability was found in the Settings Handler component of FreeBPX voicemail, specifically in the file views/ssettings.php. The issue is related to the manipulation of the key...