EUVD-2020-4108

Malware in sbrugna...

iFAX AvantFAX 代码问题漏洞

iFAX AvantFAX is a web application from iFAX Corporation that allows users to view and send faxes on any platform without the need to install special software. A security vulnerability exists in iFAX AvantFAX version 3.3.7, which stems from a file upload vulnerability that can be exploited by an...

iFAX AvantFAX 跨站脚本漏洞

iFAX AvantFAX is a web application from iFAX Corporation that allows users to view and send faxes on any platform without the need to install special software. A security vulnerability exists in iFAX AvantFAX version 3.3.7, which stems from a stored cross-site scripting XSS vulnerability that can...

CVE-2020-11766

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...

Command injection

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...

CVE-2020-11766

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...

CVE-2020-11766

CVE-2020-11766 is an authenticated command-injection vulnerability reported in NVD. The impact concerns the web interfaces of iFAX AvantFAX prior to 3.3.6 and HylaFAX Enterprise Web Interface prior to 0.2.5, where the description states that sending fax via sendfax.php can be leveraged for comman...

PT-2020-12824

Name of the Vulnerable Software and Affected Versions iFAX AvantFAX versions 3.3.5 and earlier HylaFAX Enterprise Web Interface versions 0.2.4 and earlier Description The issue allows authenticated Command Injection in the sendfax.php file. Recommendations For iFAX AvantFAX versions 3.3.5 and...

CVE-2020-11766: Improper Neutralization of Special Elements used in an OS Command

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...