CVE-2021-37449

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= reflected...

CVE-2021-37449

CVE-2021-37449 affects NCH IVM Attendant (Windows) prior to or including v5.12. The vulnerability is a cross-site scripting (XSS) in the web interface, exploitable through the parameter /ogmlist?folder= on the IVR/attendant UI due to insufficient input validation. The CNVD/NVD entries describe an...

CVE-2021-37450

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...

CVE-2021-37450

CVE-2021-37450 describes a reflected (and potentially stored) cross-site scripting vulnerability in NCH IVM Attendant v5.12 and earlier , exploitable via the parameter/url path /ogmprop?id= . Multiple connected sources corroborate an XSS condition caused by inadequate input validation in the IVR/...

CVE-2021-37451

CVE-2021-37451 : A reflected XSS in NCH IVM Attendant exists in versions up to v5.12, exploitable via the web path /msglist?mbx= due to insufficient input validation. The issue is described with CVSS v3.1 base score 5.4 (MEDIUM) — attack vector: NETWORK, user interaction required, confidentiality...

CVE-2021-37451

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= reflected...

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

CVE-2021-37452

CVE-2021-37452 affects NCH Quorum (v2.03 and earlier). The issue is an information disclosure where local users can read plaintext login information by accessing the local .dat configuration files. Multiple sources (NVD, Red Hat, CNVD, CVE records) consistently describe the vulnerability as local...

CVE-2021-37453

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the extension name stored...

CVE-2021-37453

CVE-2021-37453 is a stored Cross Site Scripting (XSS) vulnerability in NCH Axon PBX up to v2.22 and earlier, triggered via the extension name (stored) . The root cause is inadequate filtering of special characters in input data, allowing injected script to run in the client context. Documented me...

CVE-2021-37454

CVE-2021-37454 affects NCH Axon PBX v2.22 and earlier. The issue is a stored XSS in the line name field, caused by insufficient filtering of special characters, enabling injection of client‑side scripts. Reported metrics indicate low to medium impact depending on vector/privileges, with user inte...

CVE-2021-37454

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the line name stored...

CVE-2021-37455

CVE-2021-37455 describes a stored cross-site scripting (XSS) vulnerability in NCH Axon PBX, affecting v2.22 and earlier. The issue arises in the outbound dialing plan, where user-supplied data is not properly filtered for special characters, enabling execution of client-side code. The connected s...

CVE-2021-37455

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan stored...

CVE-2021-37456

NCH Axon PBX v2.22 and earlier are vulnerable to a stored XSS flaw in the blacklist IP address filtering, as described in CVE-2021-37456. The root cause is improper filtering of special characters in input data, enabling attackers to execute client-side code. Exploitation details are not provided...

CVE-2021-37456

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

CVE-2021-37457

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the SipRule field stored...

CVE-2021-37457

CVE-2021-37457 affects NCH Axon PBX v2.22 and earlier. The vulnerability is a stored Cross Site Scripting (XSS) via the SipRule field, caused by failure to properly filter incoming data for special characters. Documented impact is client-side code execution in affected deployments. Public exploit...

CVE-2021-37458

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the primary phone field stored...

CVE-2021-37458

CVE-2021-37458 describes a stored XSS vulnerability in NCH Axon PBX, affecting v2.22 and earlier, via the primary phone field. The underlying issue is failure to properly filter input in that field, enabling client‑side code execution. Data provided lists affected product and version, and states ...