Xax007

#7466of 60,596
42.7Total CVSS
Vulnerabilities · 7
Medium
7
PT-2019-15832
2019-11-28
6.1
CVE-2019-19385
Fusionpbx
Fusionpbx
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `app uuid` parameter in the "app/dialplans/dialplans.php" endpoint.
PT-2019-15834
2019-11-28
6.1
CVE-2019-19387
Fusionpbx
Fusionpbx
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the `c` parameter in the `/app/fifo list/fifo interactive.php` API endpoint.
PT-2019-15835
2019-11-28
6.1
CVE-2019-19388
Fusionpbx
Fusionpbx
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `dialplan uuid` parameter in the `/app/dialplans/dialplan detail edit.php` endpoint.
PT-2019-15831
2019-11-28
6.1
CVE-2019-19384
Fusionpbx
Fusionpbx
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `fax uuid` parameter in the `/app/fax/fax log view.php` API endpoint.
PT-2019-15833
2019-11-28
6.1
CVE-2019-19386
Fusionpbx
Fusionpbx
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `id` and/or `voicemail id` parameters in the `voicemail greeting edit.php` file.
PT-2019-15821
2019-11-27
6.1
CVE-2019-19367
Fusionpbx
Fusionpbx
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `id` parameter in the `/app/fax/fax files.php` endpoint.
PT-2019-15820
2019-11-27
6.1
CVE-2019-19366
Fusionpbx
Fusionpbx
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `redirect` parameter in the `/app/xml cdr/xml cdr search.php` API endpoint.