7 matches found
CVE-2018-14905
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter...
Cross site scripting
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter...
CVE-2018-14905
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter...
CVE-2018-14905
3CX Web server (version 15.5.8801.3) is affected by a Reflected XSS vulnerability in the api/CallLog TimeZoneName parameter. The connected CNVD/NVD entries confirm the affected product and vulnerability type but do not provide a remediation patch/version in the supplied documents. The exact root ...
CVE-2018-14905
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter...
PT-2018-12790
Name of the Vulnerable Software and Affected Versions 3CX version 15.5.8801.3 Description The issue concerns a Reflected XSS vulnerability. It affects the Web server in the specified version of 3CX, where the TimeZoneName parameter in the "api/CallLog" endpoint is vulnerable. Recommendations For...
CVE-2018-14905: Improper Neutralization of Input During Web Page Generation
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter...