108 matches found
CVE-2021-46557
Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...
CVE-2021-46557
Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...
CVE-2021-46557
Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...
Cross site scripting
Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...
CVE-2021-46557
CVE-2021-46557 affects Vicidial 2.14-783a and describes a cross-site scripting (XSS) vulnerability triggered via the input tabs. The available connected documents confirm the vulnerability type (XSS) and the affected version, but do not provide additional exploit details, impact metrics, or a pub...
CVE-2021-46557
Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...
training.vicidial.de Cross Site Scripting vulnerability OBB-1332744
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
VICIdial user_authorization command execution vulnerability
ICIdial is based on the Asterisk open source PBX system is a more complete handling of a large number of inbound and outbound call center software package, initially funded by Digium for research and development, to the open source community to maintain in order to extend the Asterisk application...
VICIdial user_authorization Unauthenticated Command Execution
No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VICIdial userauthorization Unauthenticated Command Execution', 'Description' = %q This module exploits a...
VICIdial 2.9 RC 1 < 2.13 RC1 - 'user_authorization' Command Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VICIdial userauthorization Unauthenticated Command Execution', 'Description' = %q This module exploits a vulnerability in VICIdial versions 2.9 R...
VICIdial user_authorization Unauthenticated Command Execution Exploit
This Metasploit module exploits a vulnerability in VICIdial versions 2.9 RC 1 to 2.13 RC1 which allows unauthenticated users to execute arbitrary operating system commands as the web server user if password encryption is enabled disabled by default. When password encryption is enabled the user's...
VICIdial Remote OS Command Execution Vulnerability (May 2017) - Active Check
VICIdial is prone to a remote OS command execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
VICIdial Detection (HTTP)
HTTP based detection of VICIdial. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106837";...
VICIdial user_authorization Unauthenticated Command Execution
This module exploits a vulnerability in VICIdial versions 2.9 RC 1 to 2.13 RC1 which allows unauthenticated users to execute arbitrary operating system commands as the web server user if password encryption is enabled disabled by default. When password encryption is enabled the user's password...
Vicidial 2.11 - Scripts Persistent Cross-Site Scripting
Vicidial 2.11 - Scripts Persistent Cross-Site Scripting Exploit Title: Vicidial 2.11 Scripts - Authenticated Stored XSS Date: 0 day Exploit Author: David Silveiro Exploit Author Github: github.com/davidsilveiro Vendor Homepage: http://vicidial.org Software Link:...
Vicidial 2.11 - Scripts Persistent Cross-Site Scripting
Exploit for php platform in category web applications Exploit Title: Vicidial 2.11 Scripts - Authenticated Stored XSS Exploit Author: David Silveiro Exploit Author Github: github.com/davidsilveiro Vendor Homepage: http://vicidial.org Software Link:...
Vicidial 2.11 Cross Site Scripting
Exploit Title: Vicidial 2.11 Scripts - Authenticated Stored XSS Date: 0 day Exploit Author: David Silveiro Exploit Author Github: github.com/davidsilveiro Vendor Homepage: http://vicidial.org Software Link: https://sourceforge.net/projects/astguiclient/files/astguiclient2.11rc1.zip/download...
Vicidial 2.11 Cross Site Scripting
Exploit Title: Vicidial 2.11 - Reflective XSS Date: 0 day Exploit Author: David Silveiro Exploit Author Github: github.com/davidsilveiro Vendor Homepage: http://vicidial.org Software Link: https://sourceforge.net/projects/astguiclient/files/astguiclient2.11rc1.zip/download Platorm: PHP Vicidial i...
VICIDIAL Call Center Suite <= 2.2.1-237 - Multiple Vulnerabilities
No description provided by source. ...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom Vendor Homepage:...
VICIdial Manager Send OS Command Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...