519 matches found
CVE-2019-19384
FusionPBX 4.4.1 is affected by a cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php, exploitable via the fax_uuid parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Connected sources confirm the vulnerability; remediation or patched details are ...
CVE-2019-19384
A cross-site scripting XSS vulnerability in app/fax/faxlogview.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the faxuuid parameter...
CVE-2019-19385
A cross-site scripting XSS vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the appuuid parameter...
CVE-2019-19385
CVE-2019-19385 describes a cross-site scripting (XSS) vulnerability in FusionPBX 4.4.1, specifically in the file app/dialplans/dialplans.php. The issue allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter. The connected sources confirm the affected product/ver...
CVE-2019-19386
A cross-site scripting XSS vulnerability in app/voicemailgreetings/voicemailgreetingedit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemailid parameter...
CVE-2019-19386
CVE-2019-19386 is an XSS in FusionPBX 4.4.1 affecting the file path app/voicemail_greetings/voicemail_greeting_edit.php. It allows an attacker to inject arbitrary web script or HTML via the id and/or voicemail_id parameters. Reported across multiple sources (NVD, Red Hat, CNVD, OSV) with CVSS met...
CVE-2019-19387
FusionPBX 4.4.1 is affected by a cross-site scripting (XSS) vulnerability in the file app/fifo_list/fifo_interactive.php, exploitable via the c parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The affected component is the fifo_interactive.php script within Fus...
CVE-2019-19388
A cross-site scripting XSS vulnerability in app/dialplans/dialplandetailedit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplanuuid parameter...
CVE-2019-19388
FusionPBX 4.4.1 is affected by a cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php via the dialplan_uuid parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Affected component appears to be the dialplan_detail_edit function/file; r...
CVE-2019-19386: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in app/voicemailgreetings/voicemailgreetingedit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemailid parameter...
CVE-2019-19387: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in app/fifolist/fifointeractive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the c parameter...
PT-2019-15833 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.4.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemail id parameters in the voicemail greeting edit.php file. Recommendations: For FusionPBX...
CVE-2019-19384: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in app/fax/faxlogview.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the faxuuid parameter...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-44257)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. The vulnerability stems from the...
CVE-2019-19385: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the appuuid parameter...
CVE-2019-19388: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in app/dialplans/dialplandetailedit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplanuuid parameter...
CVE-2019-19366
A cross-site scripting XSS vulnerability in app/xmlcdr/xmlcdrsearch.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
CVE-2019-19366
A cross-site scripting XSS vulnerability in app/xmlcdr/xmlcdrsearch.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...