EUVD-2018-6788

Malware in sbrugna...

3CX Cross-Site Scripting Vulnerability (CNVD-2018-17519)

3CX is an IP telephony device from 3CX USA. A cross-site scripting vulnerability exists in the 'propertyPath' parameter of the stack trace of the web server in version 15.5.8801.3 of 3CX. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Cross site scripting

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters...

CVE-2018-14906

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters...

CVE-2018-14906

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters...

CVE-2018-14906

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters...

CVE-2018-14906: Improper Neutralization of Input During Web Page Generation

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters...