Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fusionpbx vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2019-19385
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the app_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19387
A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the c parameter.
Fusionpbx Fusionpbx 4.4.1
4.3
CVSSv2
CVE-2019-19388
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the dialplan_uuid parameter.
Fusionpbx Fusionpbx 4.4.1
6.5
CVSSv2
CVE-2019-11409
app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative malicious users to execute commands on the host. This can further lead to remo...
Fusionpbx Fusionpbx 4.4.3
1 EDB exploit
4.3
CVSSv2
CVE-2020-21053
Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "query_string" variable in app\devices\device_imports.php.
Fusionpbx Fusionpbx 4.5.7
4.3
CVSSv2
CVE-2020-21054
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php.
Fusionpbx Fusionpbx 4.5.7
4
CVSSv2
CVE-2020-21055
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder, (2) filename, and (3) newfilename variables in app\edit\filerename.php.
Fusionpbx Fusionpbx 4.5.7
4
CVSSv2
CVE-2020-21056
Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php.
Fusionpbx Fusionpbx 4.5.7
5.5
CVSSv2
CVE-2020-21057
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php.
Fusionpbx Fusionpbx 4.5.7
NA
CVE-2022-35153
FusionPBX 5.0.1 exists to contain a command injection vulnerability via /fax/fax_send.php.
Fusionpbx Fusionpbx 5.0.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-3400
deserialization
CVE-2024-21788
CVE-2023-42433
CVE-2024-21841
CVE-2024-22095
local file inclusion
memory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »