CVE-2020-11766

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...

CVE-2020-11766

CVE-2020-11766 is an authenticated command-injection vulnerability reported in NVD. The impact concerns the web interfaces of iFAX AvantFAX prior to 3.3.6 and HylaFAX Enterprise Web Interface prior to 0.2.5, where the description states that sending fax via sendfax.php can be leveraged for comman...