CVE-2021-37459

概要

参考情報

• 0xfml/poc · Exploit
• nch.com.au/pbx/index.html · Product

axon pbx のその他の脆弱性

• CVE-2021-37462中 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
• CVE-2021-37461中 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
• CVE-2021-37460中 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
• CVE-2021-37458中 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
• CVE-2021-37457中 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).