CVE-2018-14906

CVE-2018-14906 affects the 3CX Web server. The vulnerability is a reflected XSS in the stack trace generation, specifically the propertyPath parameter, in 3CX version 15.5.8801.3. The root cause is untrusted input reflected in the web interface, enabling an attacker to inject malicious script/HTM...

CVE-2018-14907

The CVE-2018-14907 vulnerability affects the Web server in 3CX version 15.5.8801.3 . It exposes an information leakage issue caused by improper handling of stack traces, which can reveal a full pathname. The NVD entry lists a PARTIAL confidentiality impact with network access and low exploitation...

CVE-2018-14905

3CX Web server (version 15.5.8801.3) is affected by a Reflected XSS vulnerability in the api/CallLog TimeZoneName parameter. The connected CNVD/NVD entries confirm the affected product and vulnerability type but do not provide a remediation patch/version in the supplied documents. The exact root ...