CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2019/10/22 10:15 p.m.•14 views

CVE-2019-16971

In FusionPBX up to 4.5.7, the file app\messages\messagesthread.php uses an unsanitized "contactuuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...

6.1CVSS6.8AI score

SaveExploits0References2

Prion•added 2019/10/22 10:15 p.m.•24 views

Cross site scripting

In FusionPBX up to 4.5.7, the file app\messages\messagesthread.php uses an unsanitized "contactuuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...

4.3CVSS6.2AI score0.00803EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2019/10/22 9:16 p.m.•27 views

CVE-2019-16971

In FusionPBX up to 4.5.7, the file app\messages\messagesthread.php uses an unsanitized "contactuuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...

6.3AI score0.00803EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/10/22 12:00 a.m.•4 views

CVE-2019-16971: Improper Neutralization of Input During Web Page Generation

In FusionPBX up to 4.5.7, the file app\messages\messagesthread.php uses an unsanitized "contactuuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...

6.1CVSS6.2AI score0.00803EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by