202 matches found
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55900)
NCH Axon PBX is a set of virtual telephone exchange software used in business environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A security vulnerability exists in NCH Axon PBX due to the lack of...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55917)
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55888)
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55884)
NCH Axon PBX is a virtual phone switch software used in business environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the failure of the product's primary phone to properly filter incoming data for special characters, which can be exploited to execute...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55885)
NCH Axon PBX is a set of virtual telephone switch software used in business environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems fro...
NCH Axon PBX Directory Traversal Vulnerability (CNVD-2021-55910)
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The NCH Axon PBX has a security vulnerability that could be exploited to send a constructed URL request to the logdelete function, which contains the "dot-dot" sequence in the file parameter /... /. to vie...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55882)
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems...
NCH Axon PBX Directory Traversal Vulnerability
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The NCH Axon PBX has a security vulnerability that could be exploited by an attacker to send a constructed URL request to the logprop function, which contains a "dot-dot" sequence in the file parameter /...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55886)
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the product's blacklist IP address failing to properly filter special characters in input data, and could be exploited by...
CVE-2021-37441
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...
CVE-2021-37441
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...
CVE-2021-37440
NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...
CVE-2021-37440
NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...
Path traversal
NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...
Path traversal
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...
CVE-2021-37459
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the customer name field stored...
CVE-2021-37462
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= reflected...
CVE-2021-37460
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /planprop?id= reflected...