Browse CVEs

MEDIUM 5.3 CVE-2024-24539 FusionPBX before 5.2.0 does not validate a session. Fusionpbx 5.2.0+ Fix from $1,6002024-03-18 MEDIUM 6.5 CVE-2021-43403 An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for… Fusionpbx 4.5.30+ Fix from $1,6002022-09-29 CRITICAL 9.8 CVE-2022-35153 FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php. Fusionpbx Patch available Fix from $2,3002022-08-18 MEDIUM 6.1 CVE-2021-37524 Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsani… Fusionpbx 5.0.1+ Fix from $1,6002022-07-01 CRITICAL 9.8 CVE-2022-28055 Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function. Fusionpbx after 4.4.0 Fix from $2,3002022-05-04 HIGH 8.8 CVE-2021-43404 An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters. Fusionpbx 4.5.30+ Fix from $1,9502021-11-05 HIGH 8.8 CVE-2021-43405EPSS 36% An issue was discovered in FusionPBX before 4.5.30. The fax_extension may have risky characters (it is not constrained to be numeric). Fusionpbx 4.5.30+ Fix from $1,9502021-11-05 HIGH 8.8 CVE-2021-43406 An issue was discovered in FusionPBX before 4.5.30. The fax_post_size may have risky characters (it is not constrained to preset values). Fusionpbx 4.5.30+ Fix from $1,9502021-11-05 HIGH 8.1 CVE-2020-21057 Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to… Fusionpbx Patch available Fix from $1,9502021-05-20 MEDIUM 6.5 CVE-2020-21055 A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder, (2) filenam… Fusionpbx Patch available Fix from $1,6002021-05-20 MEDIUM 6.1 CVE-2020-21054 Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "… Fusionpbx Patch available Fix from $1,6002021-05-20 MEDIUM 6.1 CVE-2020-21053 Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsan… Fusionpbx Patch available Fix from $1,6002021-05-20 MEDIUM 6.1 CVE-2019-19384 A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or H… Fusionpbx Patch available Fix from $1,6002019-11-29 MEDIUM 6.1 CVE-2019-19385 A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script o… Fusionpbx Patch available Fix from $1,6002019-11-29 MEDIUM 6.1 CVE-2019-19386 A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackers to injec… Fusionpbx Patch available Fix from $1,6002019-11-29 MEDIUM 6.1 CVE-2019-19387 A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web s… Fusionpbx Patch available Fix from $1,6002019-11-29 MEDIUM 6.1 CVE-2019-19388 A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary w… Fusionpbx Patch available Fix from $1,6002019-11-29 MEDIUM 6.1 CVE-2019-19366 A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web scrip… Fusionpbx Patch available Fix from $1,6002019-11-27 MEDIUM 6.1 CVE-2019-19367 A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML… Fusionpbx Patch available Fix from $1,6002019-11-27 MEDIUM 6.1 CVE-2019-16977 In FusionPBX up to 4.5.7, the file app\extensions\extension_imports.php uses an unsanitized "query_string" variable coming from the URL, which is ref… Fusionpbx after 4.5.7 Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2019-16975 In FusionPBX up to 4.5.7, the file app\contacts\contact_notes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, … Fusionpbx after 4.5.7 Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2019-16976 In FusionPBX up to 4.5.7, the file app\destinations\destination_imports.php uses an unsanitized "query_string" variable coming from the URL, which is… Fusionpbx after 4.5.7 Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2019-16971 In FusionPBX up to 4.5.7, the file app\messages\messages_thread.php uses an unsanitized "contact_uuid" variable coming from the URL, which is reflect… Fusionpbx after 4.5.7 Fix from $1,6002019-10-22 MEDIUM 6.1 CVE-2019-16972 In FusionPBX up to 4.5.7, the file app\contacts\contact_addresses.php uses an unsanitized "id" variable coming from the URL, which is reflected in HT… Fusionpbx after 4.5.7 Fix from $1,6002019-10-22 MEDIUM 6.1 CVE-2019-16973 In FusionPBX up to 4.5.7, the file app\contacts\contact_edit.php uses an unsanitized "query_string" variable coming from the URL, which is reflected … Fusionpbx after 4.5.7 Fix from $1,6002019-10-22 MEDIUM 6.1 CVE-2019-16969 In FusionPBX up to 4.5.7, the file app\fifo_list\fifo_interactive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTM… Fusionpbx after 4.5.7 Fix from $1,6002019-10-21 MEDIUM 6.1 CVE-2019-16974 In FusionPBX up to 4.5.7, the file app\contacts\contact_times.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, … Fusionpbx after 4.5.7 Fix from $1,6002019-10-21 MEDIUM 6.1 CVE-2019-16970 In FusionPBX up to 4.5.7, the file app\sip_status\sip_status.php uses an unsanitized "savemsg" variable coming from the URL, which is reflected in HT… Fusionpbx after 4.5.7 Fix from $1,6002019-10-21 MEDIUM 6.1 CVE-2019-16968 An issue was discovered in FusionPBX up to 4.5.7. In the file app\conference_controls\conference_control_details.php, an unsanitized id variable comi… Fusionpbx after 4.5.7 Fix from $1,6002019-10-21 HIGH 8.8 CVE-2019-16964 app/call_centers/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of inp… Fusionpbx after 4.5.7 Fix from $1,9502019-10-21