519 matches found
CVE-2019-16991
In FusionPBX up to v4.5.7, the file app\edit\filedelete.php uses an unsanitized "file" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16991
CVE-2019-16991 affects FusionPBX up to v4.5.7. The vulnerability is a cross-site scripting (XSS) caused by an unsanitized URL parameter “file” used in app\edit\filedelete.php, which is reflected in HTML. The root cause is insufficient input sanitization of the file parameter, allowing attacker-co...
CVE-2019-16989
FusionPBX up to v4.5.7 is vulnerable to a cross-site scripting (XSS) due to an unsanitized URL parameter “c” in app/conferences_active/conference_interactive.php, which is reflected in HTML. The CVE-2019-16989 entry is corroborated by multiple sources (NVD, Red Hat, CNVD, osv.dev, CVE.org). A fix...
CVE-2019-16989
In FusionPBX up to v4.5.7, the file app\conferencesactive\conferenceinteractive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16986
In FusionPBX up to v4.5.7, the file resources\download.php uses an unsanitized "f" variable coming from the URL, which takes any pathname and allows a download of it. resources\securedownload.php is also affected...
CVE-2019-16986
FusionPBX exposes a path-traversal/download flaw in resource files. Up to v4.5.7, the unsanitized URL parameter f in resources/download.php (and in resources/secure_download.php) lets an attacker download arbitrary files. Affected versions: FusionPBX
CVE-2019-16987
In FusionPBX up to v4.5.7, the file app\contacts\contactimport.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16987
Summary: CVE-2019-16987 affects FusionPBX up to version 4.5.7. The vulnerability exists in the file app/contacts/contact_import.php, where an unsanitized query_string parameter from the URL is reflected in HTML, causing a reflected XSS. The linked Red Hat/NVD entries confirm the same issue. Impac...
CVE-2019-16985
In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...
CVE-2019-16985
FusionPBX contains a path traversal/file-deletion vulnerability in versions up to 4.5.7. The file app\xml_cdr\xml_cdr_delete.php uses an unsanitized URL parameter rec, which is base64 decoded and can cause deletion of arbitrary system files. Reported impact is arbitrary file deletion; remediation...
CVE-2019-16984
In FusionPBX up to v4.5.7, the file app\recordings\recordingplay.php uses an unsanitized "filename" variable coming from the URL, which is base64 decoded and reflected in HTML, leading to XSS...
CVE-2019-16984
FusionPBX (up to v4.5.7) is affected by CVE-2019-16984 due to an unsanitized filename parameter in app\recordings\recording_play.php. The URL-derived value is base64 decoded and reflected in HTML, causing a cross-site scripting (XSS) vulnerability. The issue stems from reflecting user-controlled ...
CVE-2019-16983
FusionPBX (up to v4.5.7) contains an XSS vulnerability in the paging function of resources/paging.php that uses an unsanitized param constructed from URL arguments and reflected in HTML. The issue is triggered via multiple interface pages and can lead to client-side code execution. Remediation pe...
CVE-2019-16983
In FusionPBX up to v4.5.7, the file resources\paging.php has a paging function called by several pages of the interface, which uses an unsanitized "param" variable constructed partially from the URL args and reflected in HTML, leading to XSS...
CVE-2019-16981
In FusionPBX up to v4.5.7, the file app\conferenceprofiles\conferenceprofileparams.php uses an unsanitized "id" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
CVE-2019-16981
FusionPBX (up to v4.5.7) is affected by a stored/reflected XSS via an unsanitized URL parameter id in the file app\conference_profiles\conference_profile_params.php, with the vulnerability evidenced by the parameter being reflected in HTML on two occasions. This is described consistently across m...
CVE-2019-16979
In FusionPBX up to v4.5.7, the file app\contacts\contacturls.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16980
In FusionPBX up to v4.5.7, the file app\callbroadcast\callbroadcastedit.php uses an unsanitized "id" variable coming from the URL in an unparameterized SQL query, leading to SQL injection...