Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fusionpbx fusionpbx 4.4.1 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2019-19366
A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the redirect parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19367
A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the id parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19384
A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the fax_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19385
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the app_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19386
A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the id and/or voicemail_id parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19387
A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the c parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19388
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the dialplan_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30065
CVE-2024-5843
CVE-2024-30080
code execution
CVE-2024-4577
CVE-2024-26169
wireless
remote code execution
CVE-2024-36103
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started