Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fusionpbx fusionpbx vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-35153
FusionPBX 5.0.1 exists to contain a command injection vulnerability via /fax/fax_send.php.
Fusionpbx Fusionpbx 5.0.1
9.8
CVSSv3
CVE-2022-28055
Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.
Fusionpbx Fusionpbx
8.8
CVSSv3
CVE-2021-43404
An issue exists in FusionPBX prior to 4.5.30. The FAX file name may have risky characters.
Fusionpbx Fusionpbx
8.8
CVSSv3
CVE-2021-43405
An issue exists in FusionPBX prior to 4.5.30. The fax_extension may have risky characters (it is not constrained to be numeric).
Fusionpbx Fusionpbx
1 Github repository
8.8
CVSSv3
CVE-2021-43406
An issue exists in FusionPBX prior to 4.5.30. The fax_post_size may have risky characters (it is not constrained to preset values).
Fusionpbx Fusionpbx
8.8
CVSSv3
CVE-2019-16964
app/call_centers/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated attackers (with at least the permission call_center_queue_add or call_center_queue_edit) ...
Fusionpbx Fusionpbx
8.8
CVSSv3
CVE-2019-16980
In FusionPBX up to v4.5.7, the file app\call_broadcast\call_broadcast_edit.php uses an unsanitized "id" variable coming from the URL in an unparameterized SQL query, leading to SQL injection.
Fusionpbx Fusionpbx
8.8
CVSSv3
CVE-2019-15029
FusionPBX 4.4.8 allows an malicious user to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET requ...
Fusionpbx Fusionpbx 4.4.8
1 Github repository
8.8
CVSSv3
CVE-2019-11409
app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative malicious users to execute commands on the host. This can further lead to remo...
Fusionpbx Fusionpbx 4.4.3
1 EDB exploit
8.1
CVSSv3
CVE-2020-21057
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php.
Fusionpbx Fusionpbx 4.5.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of service
CVE-2024-27371
CVE-2024-20405
CVE-2024-31627
CVE-2024-31625
race condition
CVE-2024-4358
cross-site scripting
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »