69 matches found
CVE-2022-24259
VoIPmonitor GUI (cdr.php) contains an incorrect check in versions before 24.96, enabling an unauthenticated attacker to escalate privileges via a crafted request. Affected software: VoIPmonitor GUI; root cause: faulty access check in cdr.php leading to privilege escalation. Impact: unauthenticate...
CVE-2022-24259
An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request...
Voipmonitor 代码问题漏洞
VoIPmonitor is an open source network packet sniffer from the VoIPmonitor team. Has a commercial front-end for the SIP RTP RTCP SKINNY SCCP MGCP WebRTC VoIP protocol running on Linux. A security vulnerability exists in Voipmonitor that stems from the configuration recovery feature of the...
Voipmonitor 授权问题漏洞
VoIPmonitor is an open source network packet sniffer from the VoIPmonitor team. Has a commercial front-end for the SIP RTP RTCP SKINNY SCCP MGCP WebRTC VoIP protocol running on Linux. Voipmonitor suffers from a security vulnerability that stems from an error check in cdr.php, a component of the...
VoIPmonitor SQL注入漏洞
VoIPmonitor is an open source network packet sniffer from the VoIPmonitor team. Has a commercial front-end for the SIP RTP RTCP SKINNYSCCP MGCP WebRTC VoIP protocol running on Linux. Voipmonitor suffers from a SQL injection vulnerability that stems from a SQL injection vulnerability in the...
The vulnerability of the config/configuration.php component of the VoIPmonitor traffic analyzer allows a attacker to execute arbitrary PHP code.
The vulnerability of the config/configuration.php component of the VoIPmonitor traffic analyzer is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...
VoIPmonitor Remote Code Execution (CVE-2021-30461)
A remote code execution vulnerability exists in VoIPmonitor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Exploit for Code Injection in Voipmonitor
Impacted Products VoIPmonitor 24.60 How to RCE...
GSD-2021-1000005 Buffer Overflow in VoIPmonitor sniffer version 27.5
In VoIPmonitor VoIPmonitor sniffer version 27.5 a Buffer Overflow exists in the live sniffer feature that can be attacked via SIP resulting in RCE, DoS...
Buffer Overflow in VoIPmonitor sniffer version 27.5
In VoIPmonitor VoIPmonitor sniffer version 27.5 a Buffer Overflow exists in the live sniffer feature that can be attacked via SIP resulting in RCE, DoS...
GSD-2021-1000004 Cross Site Scripting (XSS) in VoIPmonitor GUI version 24.55
In VoIPmonitor VoIPmonitor GUI version 24.55 a Cross Site Scripting XSS exists in the VoIPmonitor GUI that can be attacked via SIP resulting in Privilege escalation...
Cross Site Scripting (XSS) in VoIPmonitor GUI version 24.55
In VoIPmonitor VoIPmonitor GUI version 24.55 a Cross Site Scripting XSS exists in the VoIPmonitor GUI that can be attacked via SIP resulting in Privilege escalation...
CVE-2021-30461
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...
CVE-2021-30461
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...
CVE-2021-30461
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...
Remote code execution
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...
CVE-2021-30461
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...
CVE-2021-30461
VoIPmonitor is affected by CVE-2021-30461 prior to version 24.61, where the web UI accepts a user-supplied SPOOLDIR value that can inject PHP code into config/configuration.php, enabling remote code execution. The issue is exploitable by unauthenticated remote attackers via the web interface and ...
VoIPmonitor 代码注入漏洞
VoIPmonitor is an open source network packet sniffer with a commercial front-end for SIP RTP and RTCP VoIP protocols running on Linux. VoIPmonitor suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...