CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Prion•added 2019/10/21 3:15 p.m.•21 views

Design/Logic Flaw

In FusionPBX up to v4.5.7, the file app/musiconhold/musiconhold.php uses an unsanitized "file" variable coming from the URL, which takes any pathname base64 encoded and allows a download of it...

4CVSS6.4AI score0.01283EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2019/10/21 2:20 p.m.•29 views

CVE-2019-16990

In FusionPBX up to v4.5.7, the file app/musiconhold/musiconhold.php uses an unsanitized "file" variable coming from the URL, which takes any pathname base64 encoded and allows a download of it...

6.5AI score0.01283EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/10/21 12:00 a.m.•2 views

CVE-2019-16990: Improper Limitation of a Pathname to a Restricted Directory

In FusionPBX up to v4.5.7, the file app/musiconhold/musiconhold.php uses an unsanitized "file" variable coming from the URL, which takes any pathname base64 encoded and allows a download of it...

6.5CVSS6.5AI score0.01283EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by