CVE-2020-11766

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...

CVE-2020-11766

CVE-2020-11766 is an authenticated command-injection vulnerability reported in NVD. The impact concerns the web interfaces of iFAX AvantFAX prior to 3.3.6 and HylaFAX Enterprise Web Interface prior to 0.2.5, where the description states that sending fax via sendfax.php can be leveraged for comman...

CVE-2020-11766: Improper Neutralization of Special Elements used in an OS Command

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...

PT-2020-12824

Name of the Vulnerable Software and Affected Versions iFAX AvantFAX versions 3.3.5 and earlier HylaFAX Enterprise Web Interface versions 0.2.4 and earlier Description The issue allows authenticated Command Injection in the sendfax.php file. Recommendations For iFAX AvantFAX versions 3.3.5 and...