Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fusionpbx vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2019-19366
A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the redirect parameter.
Fusionpbx Fusionpbx 4.4.1
6.1
CVSSv3
CVE-2019-19367
A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the id parameter.
Fusionpbx Fusionpbx 4.4.1
6.1
CVSSv3
CVE-2019-19386
A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the id and/or voicemail_id parameter.
Fusionpbx Fusionpbx 4.4.1
6.1
CVSSv3
CVE-2019-19388
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the dialplan_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
6.1
CVSSv3
CVE-2020-21053
Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "query_string" variable in app\devices\device_imports.php.
Fusionpbx Fusionpbx 4.5.7
6.1
CVSSv3
CVE-2020-21054
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php.
Fusionpbx Fusionpbx 4.5.7
6.5
CVSSv3
CVE-2020-21055
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder, (2) filename, and (3) newfilename variables in app\edit\filerename.php.
Fusionpbx Fusionpbx 4.5.7
4.3
CVSSv3
CVE-2020-21056
Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php.
Fusionpbx Fusionpbx 4.5.7
7.2
CVSSv3
CVE-2019-11407
app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 suffers from an information disclosure vulnerability due to excessive debug information, which allows authenticated administrative malicious users to obtain credentials and other sensitive informatio...
Fusionpbx Fusionpbx 4.4.3
6.1
CVSSv3
CVE-2019-11408
XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated malicious users to inject arbitrary JavaScript characters by placing a phone call using a specially crafted caller ID number. This can further lead to remote code...
Fusionpbx Fusionpbx 4.4.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5324
path traversal
CVE-2024-4743
CVE-2024-5184
TCP
CVE-2024-27822
code injection
CVE-2024-28995
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »