CVE-2022-24260

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level...

CVE-2022-24259

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request...

CVE-2022-24259

VoIPmonitor GUI (cdr.php) contains an incorrect check in versions before 24.96, enabling an unauthenticated attacker to escalate privileges via a crafted request. Affected software: VoIPmonitor GUI; root cause: faulty access check in cdr.php leading to privilege escalation. Impact: unauthenticate...

CVE-2022-24260

Voipmonitor GUI contains a pre-auth SQL injection (CVE-2022-24260 ) in the API/utility paths (api.php and utilities.php) prior to v24.96 that allows an attacker to escalate to Administrator privileges and potentially extract data. The Nuclei template confirms the vulnerability class and affected ...

CVE-2022-24262: Unrestricted Upload of File with Dangerous Type

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root...

Voipmonitor 授权问题漏洞

VoIPmonitor is an open source network packet sniffer from the VoIPmonitor team. Has a commercial front-end for the SIP RTP RTCP SKINNY SCCP MGCP WebRTC VoIP protocol running on Linux. Voipmonitor suffers from a security vulnerability that stems from an error check in cdr.php, a component of the...

PT-2022-16571

Name of the Vulnerable Software and Affected Versions Voipmonitor GUI versions prior to 24.96 Description A SQL injection issue allows attackers to escalate privileges to the Administrator level. Recommendations For versions prior to 24.96, update to version 24.96 or later to resolve the issue...

PT-2022-16569

Name of the Vulnerable Software and Affected Versions Voipmonitor GUI versions prior to 24.96 Description The issue is related to an incorrect check in the cdr.php component of Voipmonitor GUI, allowing unauthenticated attackers to escalate privileges via a crafted request. Recommendations For...

Voipmonitor 代码问题漏洞

VoIPmonitor is an open source network packet sniffer from the VoIPmonitor team. Has a commercial front-end for the SIP RTP RTCP SKINNY SCCP MGCP WebRTC VoIP protocol running on Linux. A security vulnerability exists in Voipmonitor that stems from the configuration recovery feature of the...

PT-2022-16572

Name of the Vulnerable Software and Affected Versions Voipmonitor GUI versions prior to 24.96 Description The config restore function does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root. Recommendations...

CVE-2022-24260: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level...

CVE-2022-24259: Improper Authentication

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request...

VoIPmonitor SQL注入漏洞

VoIPmonitor is an open source network packet sniffer from the VoIPmonitor team. Has a commercial front-end for the SIP RTP RTCP SKINNYSCCP MGCP WebRTC VoIP protocol running on Linux. Voipmonitor suffers from a SQL injection vulnerability that stems from a SQL injection vulnerability in the...

VoIPmonitor Remote Code Execution (CVE-2021-30461)

A remote code execution vulnerability exists in VoIPmonitor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

The vulnerability of the config/configuration.php component of the VoIPmonitor traffic analyzer allows a attacker to execute arbitrary PHP code.

The vulnerability of the config/configuration.php component of the VoIPmonitor traffic analyzer is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

Exploit for Code Injection in Voipmonitor

Impacted Products VoIPmonitor 24.60 How to RCE...

GSD-2021-1000005 Buffer Overflow in VoIPmonitor sniffer version 27.5

In VoIPmonitor VoIPmonitor sniffer version 27.5 a Buffer Overflow exists in the live sniffer feature that can be attacked via SIP resulting in RCE, DoS...

Buffer Overflow in VoIPmonitor sniffer version 27.5

In VoIPmonitor VoIPmonitor sniffer version 27.5 a Buffer Overflow exists in the live sniffer feature that can be attacked via SIP resulting in RCE, DoS...

Cross Site Scripting (XSS) in VoIPmonitor GUI version 24.55

In VoIPmonitor VoIPmonitor GUI version 24.55 a Cross Site Scripting XSS exists in the VoIPmonitor GUI that can be attacked via SIP resulting in Privilege escalation...

GSD-2021-1000004 Cross Site Scripting (XSS) in VoIPmonitor GUI version 24.55

In VoIPmonitor VoIPmonitor GUI version 24.55 a Cross Site Scripting XSS exists in the VoIPmonitor GUI that can be attacked via SIP resulting in Privilege escalation...