461 matches found
Design/Logic Flaw
In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...
Cross site scripting
In FusionPBX up to v4.5.7, the file app\accesscontrols\accesscontrolnodes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...
Cross site scripting
In FusionPBX up to v4.5.7, the file app\conferenceprofiles\conferenceprofileparams.php uses an unsanitized "id" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
Design/Logic Flaw
In FusionPBX up to v4.5.7, the file resources\download.php uses an unsanitized "f" variable coming from the URL, which takes any pathname and allows a download of it. resources\securedownload.php is also affected...
Cross site scripting
In FusionPBX up to v4.5.7, the file app\recordings\recordingplay.php uses an unsanitized "filename" variable coming from the URL, which is base64 decoded and reflected in HTML, leading to XSS...
Cross site scripting
In FusionPBX up to v4.5.7, the file resources\paging.php has a paging function called by several pages of the interface, which uses an unsanitized "param" variable constructed partially from the URL args and reflected in HTML, leading to XSS...
CVE-2019-16988
In FusionPBX up to v4.5.7, the file app\basicoperatorpanel\resources\content.php uses an unsanitized "eavesdropdest" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...
CVE-2019-16988
FusionPBX up to v4.5.7 is affected by a cross-site scripting (XSS) vulnerability in app\basic_operator_panel\resources\content.php due to an unsanitized URL parameter (eavesdrop_dest) reflected in HTML on three occasions. The issue is consistently described across multiple sources (CVE-2019-16988...
CVE-2019-16991
In FusionPBX up to v4.5.7, the file app\edit\filedelete.php uses an unsanitized "file" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16991
CVE-2019-16991 affects FusionPBX up to v4.5.7. The vulnerability is a cross-site scripting (XSS) caused by an unsanitized URL parameter “file” used in app\edit\filedelete.php, which is reflected in HTML. The root cause is insufficient input sanitization of the file parameter, allowing attacker-co...
CVE-2019-16989
FusionPBX up to v4.5.7 is vulnerable to a cross-site scripting (XSS) due to an unsanitized URL parameter “c” in app/conferences_active/conference_interactive.php, which is reflected in HTML. The CVE-2019-16989 entry is corroborated by multiple sources (NVD, Red Hat, CNVD, osv.dev, CVE.org). A fix...
CVE-2019-16989
In FusionPBX up to v4.5.7, the file app\conferencesactive\conferenceinteractive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16986
In FusionPBX up to v4.5.7, the file resources\download.php uses an unsanitized "f" variable coming from the URL, which takes any pathname and allows a download of it. resources\securedownload.php is also affected...
CVE-2019-16986
FusionPBX exposes a path-traversal/download flaw in resource files. Up to v4.5.7, the unsanitized URL parameter f in resources/download.php (and in resources/secure_download.php) lets an attacker download arbitrary files. Affected versions: FusionPBX
CVE-2019-16987
In FusionPBX up to v4.5.7, the file app\contacts\contactimport.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16987
Summary: CVE-2019-16987 affects FusionPBX up to version 4.5.7. The vulnerability exists in the file app/contacts/contact_import.php, where an unsanitized query_string parameter from the URL is reflected in HTML, causing a reflected XSS. The linked Red Hat/NVD entries confirm the same issue. Impac...
CVE-2019-16985
In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...
CVE-2019-16985
FusionPBX contains a path traversal/file-deletion vulnerability in versions up to 4.5.7. The file app\xml_cdr\xml_cdr_delete.php uses an unsanitized URL parameter rec, which is base64 decoded and can cause deletion of arbitrary system files. Reported impact is arbitrary file deletion; remediation...
CVE-2019-16984
FusionPBX (up to v4.5.7) is affected by CVE-2019-16984 due to an unsanitized filename parameter in app\recordings\recording_play.php. The URL-derived value is base64 decoded and reflected in HTML, causing a cross-site scripting (XSS) vulnerability. The issue stems from reflecting user-controlled ...