Lucene search
+L

6 matches found

NVD
NVD
•added 2026/02/11 9:16 p.m.•21 views

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS0.04598EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/11 8:49 p.m.•42 views

CVE-2020-37153 ASTPP VoIP 4.0.1 - Remote Code Execution

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS0.04598EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/11 8:49 p.m.•11 views

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS5.7AI score0.04598EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/11 8:49 p.m.•8 views

CVE-2020-37153 ASTPP VoIP 4.0.1 - Remote Code Execution

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS5.7AI score0.04598EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•1 views

CVE-2020-37153: Improper Neutralization of Input During Web Page Generation

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS6.1AI score0.04598EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•32 views

ASTPP 跨站脚本漏洞

ASTPP is a VoIP billing solution developed by Innextrix Technologies Pvt. Ltd. Version 4.0.1 of ASTPP contains a cross-site scripting vulnerability. This vulnerability stems from cross-site scripting and command injection vulnerabilities in the SIP device configuration and plugin management...

9.8CVSS5.9AI score0.04598EPSS
SaveExploits1References4
Rows per page
Query Builder