Elastix PBX Extension Enumeration

Exploit Title: Elastix PBX Extensions Enumeration Date: 1 Oct 2011 Author: Bassem Saleh Contact: Injectoratlivedotcom Software Link: http://www.elastix.org/ Version: 2.X and may be below versions Tested on: 2.0.3 ================================================================ Non privileges user...

Elastix Cross Site Scripting

Oh look I think bugtraq hates me .... more lame xss in yet another voip management user interface for asterisk... ---------- Forwarded message ---------- From: dave b Date: 29 October 2010 03:36 Subject: xss in elastix To: [email protected] xss in elastixhttp://www.elastix.org/ , 1...

Elastix 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities

Elastix 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44565/info Elastix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

Elastix 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44565/info Elastix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2010-1492

Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the idnodo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Directory traversal

Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the idnodo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1492

Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the idnodo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1492

CVE-2010-1492 affects Elastix 1.6.0. A directory traversal flaw in help/frameRight.php (id_nodo parameter) lets remote attackers read arbitrary files using ..; no exploit details provided in the connected docs. CVSSv2 base score 5.0 (Medium). Remediation details are not specified in the supplied ...