Brekeke PBX Cross-Site Request Forgery Vulnerability

This host is running Brekeke PBX and is prone to Cross-Site Request Forgery Vulnerability. OpenVAS Vulnerability Test $Id: secpodbrekekepbxcsrfvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Brekeke PBX Cross-Site Request Forgery Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

CVE-2010-2114

Cross-site request forgery CSRF vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean...

CVE-2010-2114

Brekeke PBX 2.4.4.8 is affected by a Cross-Site Request Forgery (CSRF) in the pbx/gate component, allowing an attacker to hijack a user’s authenticated session to perform password-change requests via the pbxadmin.web.PbxUserEdit bean. The vulnerability’s rooted in CSRF, with the impact being that...

CVE-2010-2114

Cross-site request forgery CSRF vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean...

Brekeke PBX 2.4.4.8 Cross Site Request Forgery

!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Brekeke PBX 2.4.4.8 - pbxgate Cross-Site Request Forgery

Brekeke PBX 2.4.4.8 - pbxgate Cross-Site Request Forgery source: https://www.securityfocus.com/bid/40407/info Brekeke PBX is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized acces...

Brekeke PBX 2.4.4.8 - 'pbx/gate' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/40407/info Brekeke PBX is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also...

Axon Virtual PBX 2.13 Multiple Remote Vulnerabilities

NCH Software Axon virtual PBX is prone to multiple remote vulnerabilities, including: - A cross-site scripting vulnerability. - A cross-site request forgery vulnerability. - An arbitrary file deletion vulnerability. - A directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG...

Fedora Update for asterisk FEDORA-2010-3381

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2010-3381 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 12 Update: asterisk-1.6.1.17-1.fc12

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Fedora Update for asterisk FEDORA-2010-3724

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2010-3724 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 11 Update: asterisk-1.6.1.17-1.fc11

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

trixbox maint Web Interface Default Credentials

The remote web server hosts the web interface for trixbox or Asterisk@Home, as it was formerly known, a PBX application based on Asterisk. The remote installation of this web interface has at least one account configured using default credentials. With this information, an attacker can gain...

Debian Security Advisory DSA 1952-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1952-1. OpenVAS Vulnerability Test $Id: deb19521.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1952-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1952-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PBX Business Phone Application Cross Site Scripting

PenTest Information: ==================== Global-Evolution Security Team remove discover multiple Vulnerabilities on PBX Phone System Application. An attacker can get sensitive customer/admin session-data over multiple Cross-Site-Scripting vulnerabilities. Details ======= Tested on OS: Windows 7...

PBX Phone System 2.x - Multiple Vulnerabilities

PBX Phone System 2.x - Multiple Vulnerabilities PenTest Information: ==================== Global-Evolution Security Team remove discover multiple Vulnerabilities on PBX Phone System Application. An attacker can get sensitive customer/admin session-data over multiple Cross-Site-Scripting...

PBX Phone System v2.x - Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ PBX Phone System v2.x - Multiple Vulnerabilities ================================================ PenTest Information: ==================== Global-Evolution Security Team remove discover...

PBX Phone System v2.x - Multiple Vulnerabilities

No description provided by source. PenTest Information: ==================== Global-Evolution Security Team remove discover multiple Vulnerabilities on PBX Phone System Application. An attacker can get sensitive customer/admin session-data over multiple Cross-Site-Scripting vulnerabilities. Detai...