518 matches found
CVE-2022-35153
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/faxsend.php...
Command injection
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/faxsend.php...
CVE-2022-35153
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/faxsend.php...
CVE-2022-35153
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/faxsend.php...
CVE-2022-35153
FusionPBX 5.0.1 is affected by a command injection vulnerability via the /fax/fax_send.php endpoint. The root cause is a command injection in the fax_send functionality, yielding potential full impact on confidentiality, integrity, and availability (CVSS v3.1 base score 9.8). The provided documen...
FusionPBX 命令注入漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX version 5.0.1, which originates from a command...
CVE-2022-35153: Improper Encoding or Escaping of Output
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/faxsend.php...
PT-2022-22603 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX version 5.0.1 Description: A command injection issue was found in FusionPBX via the /fax/fax send.php endpoint. This allows for potential command execution. Recommendations: For FusionPBX version 5.0.1, update to a version that...
CVE-2021-37524
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...
CVE-2021-37524
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...
CVE-2021-37524
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...
Cross site scripting
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...
CVE-2021-37524
FusionPBX 4.5.26 is affected by a Cross-Site Scripting (XSS) vulnerability in resources/login.php, triggered by an unsanitized path parameter. The issue allows remote unauthenticated users to inject arbitrary web script or HTML. The root cause is lack of input sanitization for the path parameter....
CVE-2021-37524
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...
FusionPBX 跨站脚本漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX 4.5.26, which allows remote, unauthenticated...
CVE-2021-37524: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...
CVE-2022-28055
Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function...
CVE-2022-28055
Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function...