Vulners
Lucene search
2 matches found
Design/Logic Flaw
In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...
8.5CVSS6.5AI score0.00392EPSS
Exploits0References2Affected Software1
CVE-2019-16985
In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...
6.5AI score0.00392EPSS
Exploits0References2
20