4 matches found
Directory traversal
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php...
CVE-2020-21057
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php...
CVE-2020-21057: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php...
PT-2021-10580
Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.5.7 Description: A Directory Traversal issue allows a remote malicious user to delete folders on the system. This is achieved by exploiting the folder variable in the "/app/edit/folderdelete.php" endpoint. Recommendations:...