CVE-2022-34879

概要

参考情報

• vicidial.org/VICIDIALforum/viewtopic.php · Vendor Advisory

vicidial のその他の脆弱性

• CVE-2021-35377中 6.1Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidia…
• CVE-2022-34878高 8.8SQL Injection vulnerability in User Stats interface (/vicidial/user_stats.php) of VICIdial via the file_download parameter allows attacker t…
• CVE-2022-34877高 8.8SQL Injection vulnerability in AST Agent Time Sheet interface ((/vicidial/AST_agent_time_sheet.php) of VICIdial via the agent parameter allo…
• CVE-2022-34876高 8.8SQL Injection vulnerability in admin interface (/vicidial/admin.php) of VICIdial via modify_email_accounts, access_recordings, and agentcall…
• CVE-2021-46557中 5.4Vicidial 2.14-783a was discovered to contain a cross-site scripting (XSS) vulnerability via the input tabs.