8 matches found
CVE-2024-28722
Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xmlmodes.xml endpoint...
CVE-2024-28722
Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xmlmodes.xml endpoint...
CVE-2024-28722
Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xmlmodes.xml endpoint...
CVE-2024-28722
Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xmlmodes.xml endpoint...
CVE-2024-28722: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xmlmodes.xml endpoint...
CVE-2024-28722
Innovaphone myPBX versions v.14r1 , v.13r3 , and v.12r2 are vulnerable to a Cross-Site Scripting (XSS) flaw. A remote attacker can exploit this by providing a malicious query parameter to the /CMD0/xml_modes.xml endpoint, which may allow for the execution of arbitrary code or the injection of mal...
Innovaphone myPBX 安全漏洞
Innovaphone myPBX is an application from Innovaphone, Inc. Designed to help cell phone users with everyday tasks. A security vulnerability exists in Innovaphone myPBX version v.14r1, v.13r3, and v.12r2. A remote attacker can exploit this vulnerability to execute arbitrary code via the query...
