2 matches found
Design/Logic Flaw
In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...
8.5CVSS6.5AI score0.0114EPSS
SaveExploits0References2Affected Software1
20