385 matches found
NCH IVM Attendant Directory Traversal Vulnerability (CNVD-2021-55908)
NCH IVM Attendant is a complete voicemail, call attendant and IVR solution for Windows.A security vulnerability exists in NCH IVM Attendant, which could be exploited by an attacker to delete files by traversing the path with the logdeleteselected check0 parameter...
NCH Axon PBX Directory Traversal Vulnerability
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The NCH Axon PBX has a security vulnerability that could be exploited by an attacker to send a constructed URL request to the logprop function, which contains a "dot-dot" sequence in the file parameter /...
NCH Quorum Cross-Site Scripting Vulnerability (CNVD-2021-55899)
NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. A cross-site scripting vulnerability exists in NCH Quorum, which could be exploited by attackers to steal cookie-based authentication credentials from victims...
NCH WebDictate Directory Traversal Vulnerability
A security vulnerability exists in NCH WebDictate, a web-based dictation recording, editing and management software, which stems from the product's logprop?file=/... path fails to filter incoming special characters, which can be exploited to read critical files...
Multiple vulnerabilities exist in NCH Quorum (CNVD-2021-55905)
NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. NCH Quorum is vulnerable to directory traversal and arbitrary file deletion, which can be exploited to view or delete any file on a remote system via path traversal in a separate function...
NCH Axon PBX Directory Traversal Vulnerability (CNVD-2021-55910)
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The NCH Axon PBX has a security vulnerability that could be exploited to send a constructed URL request to the logdelete function, which contains the "dot-dot" sequence in the file parameter /... /. to vie...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55882)
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems...
NCH Quorum Cross-Site Scripting Vulnerability (CNVD-2021-57430)
NCH Quorum is software that runs as a teleconferencing server on a Windows PC. A cross-site scripting vulnerability exists in NCH Quorum 2.03 and earlier versions. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via /conference?id=...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55885)
NCH Axon PBX is a set of virtual telephone switch software used in business environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems fro...
NCH WebDictate Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in NCH WebDictate, a web-based dictation recording, editing, and management software, which stems from a failure of the product's Recipient Name field to properly validate user data, which could be exploited to add or modify affected fields...
NCH IVM Attendant Cross-Site Scripting Vulnerability (CNVD-2021-55902)
NCH IVM Attendant is a complete voicemail, call attendant and IVR solution for Windows. a security vulnerability exists in NCH IVM Attendant due to a lack of comprehensive input validation, which can be exploited by an authenticated attacker to inject a JavaScript cross-site scripting payload int...
NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55886)
NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the product's blacklist IP address failing to properly filter special characters in input data, and could be exploited by...
CVE-2021-37445
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...
CVE-2021-37447
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...
CVE-2021-37448
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name stored...
CVE-2021-37445
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...
CVE-2021-37449
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= reflected...
CVE-2021-37446
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...