Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fusionpbx vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2019-19366
A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the redirect parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19367
A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the id parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19384
A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the fax_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19385
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the app_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19386
A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the id and/or voicemail_id parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19387
A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the c parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19388
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the dialplan_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
4
CVSSv2
CVE-2020-21055
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder, (2) filename, and (3) newfilename variables in app\edit\filerename.php.
Fusionpbx Fusionpbx 4.5.7
5.5
CVSSv2
CVE-2020-21057
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php.
Fusionpbx Fusionpbx 4.5.7
9
CVSSv2
CVE-2019-15029
FusionPBX 4.4.8 allows an malicious user to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET requ...
Fusionpbx Fusionpbx 4.4.8
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryption
CVE-2024-4331
CVE-2024-26925
arbitrary code
CVE-2006-4304
CVE-2024-25458
CVE-2024-27077
reflected XSS
CVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »