CVE-2021-37450

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...

CVE-2021-37451

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= reflected...

CVE-2021-37451

CVE-2021-37451 : A reflected XSS in NCH IVM Attendant exists in versions up to v5.12, exploitable via the web path /msglist?mbx= due to insufficient input validation. The issue is described with CVSS v3.1 base score 5.4 (MEDIUM) — attack vector: NETWORK, user interaction required, confidentiality...

CVE-2021-37452

CVE-2021-37452 affects NCH Quorum (v2.03 and earlier). The issue is an information disclosure where local users can read plaintext login information by accessing the local .dat configuration files. Multiple sources (NVD, Red Hat, CNVD, CVE records) consistently describe the vulnerability as local...

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

CVE-2021-37453

CVE-2021-37453 is a stored Cross Site Scripting (XSS) vulnerability in NCH Axon PBX up to v2.22 and earlier, triggered via the extension name (stored) . The root cause is inadequate filtering of special characters in input data, allowing injected script to run in the client context. Documented me...

CVE-2021-37453

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the extension name stored...

CVE-2021-37454

CVE-2021-37454 affects NCH Axon PBX v2.22 and earlier. The issue is a stored XSS in the line name field, caused by insufficient filtering of special characters, enabling injection of client‑side scripts. Reported metrics indicate low to medium impact depending on vector/privileges, with user inte...

CVE-2021-37454

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the line name stored...

CVE-2021-37455

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan stored...

CVE-2021-37455

CVE-2021-37455 describes a stored cross-site scripting (XSS) vulnerability in NCH Axon PBX, affecting v2.22 and earlier. The issue arises in the outbound dialing plan, where user-supplied data is not properly filtered for special characters, enabling execution of client-side code. The connected s...

CVE-2021-37456

NCH Axon PBX v2.22 and earlier are vulnerable to a stored XSS flaw in the blacklist IP address filtering, as described in CVE-2021-37456. The root cause is improper filtering of special characters in input data, enabling attackers to execute client-side code. Exploitation details are not provided...

CVE-2021-37456

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

CVE-2021-37457

CVE-2021-37457 affects NCH Axon PBX v2.22 and earlier. The vulnerability is a stored Cross Site Scripting (XSS) via the SipRule field, caused by failure to properly filter incoming data for special characters. Documented impact is client-side code execution in affected deployments. Public exploit...

CVE-2021-37457

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the SipRule field stored...

CVE-2021-37458

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the primary phone field stored...

CVE-2021-37458

CVE-2021-37458 describes a stored XSS vulnerability in NCH Axon PBX, affecting v2.22 and earlier, via the primary phone field. The underlying issue is failure to properly filter input in that field, enabling client‑side code execution. Data provided lists affected product and version, and states ...

CVE-2021-37459

CVE-2021-37459 affects NCH Axon PBX (v2.22 and earlier). The vulnerability is a stored cross-site scripting (XSS) flaw originating in the product’s customer name field, which fails to properly filter special characters, enabling client-side script execution. The issue is documented across multipl...

CVE-2021-37459

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the customer name field stored...

CVE-2021-37460

The CVE-2021-37460 issue affects NCH Axon PBX, specifically versions v2.22 and earlier. It is a reflected Cross-Site Scripting (XSS) vulnerability reachable via the /planprop?id= parameter, caused by inadequate filtering of input data. The consequence is client-side code execution if an attacker ...