466 matches found
CVE-2021-43406
FusionPBX is affected before version 4.5.30. The issue stems from fax_post_size not being constrained to preset values, allowing risky characters to pass to downstream handling. CVSSv3.1 base score is 8.8 (HIGH), with network attack, low complexity, privileges required: LOW, no user interaction. ...
CVE-2021-43404
CVE-2021-43404 affects FusionPBX prior to 4.5.30, where the FAX file name may contain risky characters. The issue is defined with both CVSS vectors (2.0: 6.5 (MEDIUM), 3.1: 8.8 (HIGH)) indicating network-accessible impact with high confidentiality, integrity, and availability implications. Connec...
CVE-2021-43404
An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...
FusionPBX 安全漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from the fact tha...
FusionPBX 输入验证错误漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from faxpostsize ma...
PT-2021-23832 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.30 Description: An issue was discovered where the FAX file name may contain risky characters, potentially leading to security issues. Recommendations: For versions prior to 4.5.30, update to version 4.5.30 or...
FusionPBX 安全漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from a fax file...
PT-2021-23831 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.30 Description: An issue was discovered in the log viewer.php Log View page, which allows an authenticated user to choose an arbitrary filename for download, not limited to the intended directory or the...
PT-2021-23833 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.30 Description: An issue was discovered where the fax extension may have risky characters because it is not constrained to be numeric. Recommendations: For versions prior to 4.5.30, update to version 4.5.30 or...
FusionPBX Path Traversal Vulnerability (CNVD-2021-36592)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. FusionPBX 4.5.7 suffers from a path traversal vulnerability that originates from a maliciou...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2021-36591)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX 4.5.7, which allows remote malicious users to...
FusionPBX Path Traversal Vulnerability (CNVD-2021-36593)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. FusionPBX 4.5.7 suffers from a path traversal vulnerability that allows remote malicious...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2021-37587)
FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in FusionPBX version 4.5.7. An attacker can exploit this vulnerability to inject arbitrary Web script or HTML via the querystring variable in...
FusionPBX Directory Traversal Vulnerability
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX 4.5.7 that allows a remote malicious user to...
CVE-2020-21054
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\varstextarea.php...
CVE-2020-21056
Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php...
CVE-2020-21054
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\varstextarea.php...
CVE-2020-21055
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the 1 folder, 2 filename, and 3 newfilename variables in app\edit\filerename.php...