Lucene search
K

8 matches found

NVD
NVD
added 2026/02/11 9:16 p.m.3 views

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS0.00176EPSS
Exploits1References4
OSV
OSV
added 2026/02/11 9:16 p.m.2 views

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS6AI score
Exploits0References4
CVE
CVE
added 2026/02/11 8:49 p.m.8 views

CVE-2020-37153

CVE-2020-37153 affects ASTPP 4.0.1. The vulnerability set includes cross-site scripting and command injection in the SIP device configuration and plugin management interfaces. Attackers could inject system commands, hijack administrator sessions, and potentially execute arbitrary code with root p...

9.8CVSS5.7AI score0.00176EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/11 8:49 p.m.2 views

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS5.7AI score0.00176EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/11 8:49 p.m.19 views

CVE-2020-37153 ASTPP VoIP 4.0.1 - Remote Code Execution

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS0.00176EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/02/11 8:49 p.m.3 views

CVE-2020-37153 ASTPP VoIP 4.0.1 - Remote Code Execution

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS5.7AI score0.00176EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.2 views

ASTPP 跨站脚本漏洞

ASTPP is a VoIP billing solution developed by Innextrix Technologies Pvt. Ltd. Version 4.0.1 of ASTPP contains a cross-site scripting vulnerability. This vulnerability stems from cross-site scripting and command injection vulnerabilities in the SIP device configuration and plugin management...

9.8CVSS5.9AI score0.00176EPSS
Exploits1References4
0day.today
0day.today
added 2012/05/27 12:0 a.m.524 views

IP phone AT6XX Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ================================== IP phone AT6XX Cross Site Scripting ================================== ======================================================= Exploit Title: IP phone AT6XX Cross Site Scripting Date: 27/05/2012 Author: cheki...

7.1AI score
Exploits0
Rows per page
Query Builder