Lucene search
+L

140 matches found

Prion
Prion
added 2023/07/11 5:15 p.m.22 views

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist function...

5.8CVSS7.8AI score0.00616EPSS
SaveExploits2References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/07/11 2:15 a.m.8 views

CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

4.8CVSS5.9AI score0.00482EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/07/11 2:15 a.m.5 views

CVE-2023-37189

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.8CVSS5.7AI score0.00735EPSS
SaveExploits1References3
NVD
NVD
added 2023/07/11 2:15 a.m.18 views

CVE-2023-37189

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.8CVSS5AI score0.00735EPSS
SaveExploits1References2
NVD
NVD
added 2023/07/11 2:15 a.m.29 views

CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

4.8CVSS5AI score0.00482EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/11 2:15 a.m.10 views

CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

4.8CVSS5.9AI score0.00482EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/11 2:15 a.m.11 views

CVE-2023-37189

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.8CVSS5.6AI score0.00735EPSS
SaveExploits1References2
Prion
Prion
added 2023/07/11 2:15 a.m.22 views

Cross site scripting

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.3CVSS5AI score0.00735EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/07/11 2:15 a.m.25 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

4.3CVSS4.9AI score0.00482EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/07/11 1:15 a.m.11 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.8CVSS5.9AI score0.00649EPSS
SaveExploits1References2
NVD
NVD
added 2023/07/11 1:15 a.m.27 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.8CVSS5AI score0.00649EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/11 1:15 a.m.6 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.8CVSS5.9AI score0.00649EPSS
SaveExploits1References3
Prion
Prion
added 2023/07/11 1:15 a.m.25 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.3CVSS4.9AI score0.00649EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/11 12:00 a.m.30 views

CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

5.6AI score0.00482EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/07/11 12:00 a.m.37 views

CVE-2023-37596

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function...

8AI score0.00616EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.10 views

Issabel PBX 跨站请求伪造漏洞

Issabel PBX is a software application. A free and open source software that allows you to build communication tools for your organization. A security vulnerability exists in issabelPBX version v.4.0.0-6, which stems from the presence of a cross-site request forgery CSRF vulnerability that could...

8.1CVSS7.5AI score0.00616EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2023/07/11 12:00 a.m.39 views

CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

5.2AI score0.00482EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/07/11 12:00 a.m.17 views

CVE-2023-37596

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function...

7AI score0.00616EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.10 views

Issabel PBX 跨站请求伪造漏洞

Issabel PBX is a software application. A free and open source software that allows you to build communication tools for your organization. A cross-site request forgery vulnerability exists in Issabel PBX version v.4.0.0-6, which originates from a vulnerability that allows remote attackers to caus...

8.1CVSS7.6AI score0.00616EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2023/07/11 12:00 a.m.20 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

5.6AI score0.00649EPSS
SaveExploits1References2
Rows per page
Query Builder