461 matches found
CVE-2019-16975
CVE-2019-16975 affects FusionPBX up to version 4.5.7. The issue is a reflected XSS in the file app/contacts/contact_notes.php, where an unsanitized URL parameter named id is echoed into HTML. The root cause is unsanitized input from the URL; the description indicates client-side code execution co...
CVE-2019-16975
In FusionPBX up to 4.5.7, the file app\contacts\contactnotes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16976
In FusionPBX up to 4.5.7, the file app\destinations\destinationimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
CVE-2019-16976
In FusionPBX up to 4.5.7, the file app\destinations\destinationimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
Cross site scripting
In FusionPBX up to 4.5.7, the file app\destinations\destinationimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
CVE-2019-16976
CVE-2019-16976 affects FusionPBX up to version 4.5.7. The vulnerability is a reflected cross‑site scripting (XSS) caused by an unsanitized URL parameter in the file app\destinations\destination_imports.php where the parameter named query_string is echoed in the HTML on two occasions. Publicly ava...
CVE-2019-16976
In FusionPBX up to 4.5.7, the file app\destinations\destinationimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-36989)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and prior versions. The...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37371)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...
FusionPBX Path Traversal Vulnerability
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A path traversal vulnerability exists in FusionPBX. An attacker could exploit this...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-36990)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and prior versions. The...
FusionPBX Path Traversal Vulnerability (CNVD-2019-37368)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A path traversal vulnerability exists in FusionPBX. An attacker could exploit this...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37107)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37105)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37106)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37369)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37366)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...
FusionPBX SQL Injection Vulnerability
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. An SQL injection vulnerability exists in FusionPBX. An attacker can exploit this...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37367)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...