CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Mend•added 2019/10/21 2:10 p.m.•2 views

CVE-2019-16980

In FusionPBX up to v4.5.7, the file app\callbroadcast\callbroadcastedit.php uses an unsanitized "id" variable coming from the URL in an unparameterized SQL query, leading to SQL injection...

8.8CVSS0.01197EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/10/21 12:00 a.m.•5 views

CVE-2019-16980: Improper Neutralization of Special Elements used in an SQL Command

In FusionPBX up to v4.5.7, the file app\callbroadcast\callbroadcastedit.php uses an unsanitized "id" variable coming from the URL in an unparameterized SQL query, leading to SQL injection...

8.8CVSS7.7AI score0.01197EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by