CVE-2020-11766

概要

参考情報

• ftp.ifax.com/security/CVE-2020-11766.html · Vendor Advisory

avantfax のその他の脆弱性

• CVE-2025-1782緊急 9.9In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused …
• CVE-2023-23328高 8.8A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploadi…
• CVE-2023-23327中 4.9An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and database backups are stor…
• CVE-2023-23326中 5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low privilege user can inject arbitrary Javascr…
• CVE-2017-18024中 6.1AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT eleme…