Lucene search
+L

9 matches found

NVD
NVD
•added 2026/02/11 9:16 p.m.•21 views

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS0.04598EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/11 9:16 p.m.•15 views

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS6AI score0.04598EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/11 8:49 p.m.•23 views

CVE-2020-37153

CVE-2020-37153 affects ASTPP 4.0.1. The vulnerability set includes cross-site scripting and command injection in the SIP device configuration and plugin management interfaces. Attackers could inject system commands, hijack administrator sessions, and potentially execute arbitrary code with root p...

9.8CVSS5.7AI score0.04598EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2026/02/11 8:49 p.m.•11 views

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS5.7AI score0.04598EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/02/11 8:49 p.m.•42 views

CVE-2020-37153 ASTPP VoIP 4.0.1 - Remote Code Execution

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS0.04598EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/11 8:49 p.m.•8 views

CVE-2020-37153 ASTPP VoIP 4.0.1 - Remote Code Execution

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS5.7AI score0.04598EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•0 views

CVE-2020-37153: Improper Neutralization of Input During Web Page Generation

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS6.1AI score0.04598EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•32 views

ASTPP 跨站脚本漏洞

ASTPP is a VoIP billing solution developed by Innextrix Technologies Pvt. Ltd. Version 4.0.1 of ASTPP contains a cross-site scripting vulnerability. This vulnerability stems from cross-site scripting and command injection vulnerabilities in the SIP device configuration and plugin management...

9.8CVSS5.9AI score0.04598EPSS
SaveExploits1References4
zdt
zdt
•added 2012/05/27 12:00 a.m.•555 views

IP phone AT6XX Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ================================== IP phone AT6XX Cross Site Scripting ================================== ======================================================= Exploit Title: IP phone AT6XX Cross Site Scripting Date: 27/05/2012 Author: cheki...

7.1AI score
SaveExploits0
Rows per page
Query Builder