CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

Session fixation

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

Design/Logic Flaw

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

Design/Logic Flaw

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43403

FusionPBX before 4.5.30 is affected by a vulnerability in log_viewer.php that lets an authenticated user specify an arbitrary filename for download (not restricted to freeswitch.log in the intended directory). Root cause: improper validation/restriction on downloadable file paths via the log view...

CVE-2021-43403

An issue was discovered in FusionPBX before 4.5.30. The logviewer.php Log View page allows an authenticated user to choose an arbitrary filename for download i.e., not necessarily freeswitch.log in the intended directory...

CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

CVE-2021-43405

CVE-2021-43405 : FusionPBX before 4.5.30 is vulnerable due to fax_extension allowing non-numeric characters, which can enable authenticated remote code execution via fax_send.php (as shown in exploits for 4.5.29). Affected: FusionPBX client/server component handling fax extension input. Impact: p...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43406

FusionPBX is affected before version 4.5.30. The issue stems from fax_post_size not being constrained to preset values, allowing risky characters to pass to downstream handling. CVSSv3.1 base score is 8.8 (HIGH), with network attack, low complexity, privileges required: LOW, no user interaction. ...

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43404

CVE-2021-43404 affects FusionPBX prior to 4.5.30, where the FAX file name may contain risky characters. The issue is defined with both CVSS vectors (2.0: 6.5 (MEDIUM), 3.1: 8.8 (HIGH)) indicating network-accessible impact with high confidentiality, integrity, and availability implications. Connec...

FusionPBX 安全漏洞

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from the fact tha...

FusionPBX 输入验证错误漏洞

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from faxpostsize ma...