382 matches found
CVE-2021-37454
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the line name stored...
Path traversal
In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem...
Cross site scripting
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the extension name stored...
CVE-2021-37460
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /planprop?id= reflected...
Code injection
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...
CVE-2021-37459
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the customer name field stored...
CVE-2021-37456
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...
CVE-2021-37468
NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...
Design/Logic Flaw
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...
Cross site scripting
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= reflected...
Cross site scripting
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the line name stored...
Cross site scripting
In NCH WebDictate v2.13, persistent Cross Site Scripting XSS exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript...
Cross site scripting
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= reflected...
Cross site scripting
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...
Cross site scripting
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /planprop?id= reflected...
CVE-2021-37466
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...
Cross site scripting
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...
Cross site scripting
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...
CVE-2021-37439
CVE-2021-37439 affects NCH FlexiServer v6.00. The vulnerability is a directory traversal via the syslog?file=/.. parameter, caused by failure to filter special characters, allowing access to sensitive information. Exploit details are not provided in the connected documents. No remediation details...
