CVE-2019-19385

Description

References

• gist.github.com/xax007/28e7326acfae677be0b351216888e522 · Exploit
• fusionpbx/fusionpbx commit fe504b8 · Patch

Altre vulnerabilità di fusionpbx

• CVE-2024-24539MEDIO 5.3FusionPBX before 5.2.0 does not validate a session.
• CVE-2024-23387MEDIO 4.8FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacke…
• CVE-2021-43403MEDIO 6.5An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary fil…
• CVE-2022-35153CRITICO 9.8FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.
• CVE-2021-37524MEDIO 6.1Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via …