CVE-2025-30004

Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35...

Xorcom CompletePBX 跨站脚本漏洞

Xorcom CompletePBX is an Asterisk-based enterprise-class IP telephony system from Xorcom Israel. A cross-site scripting vulnerability exists in Xorcom CompletePBX version 5.2.35 and earlier, which stems from a reflective cross-site scripting attack in the administration control panel...