CVE-2023-23328

概要

参考情報

• superkojiman/vulnerabilities · Exploit

avantfax のその他の脆弱性

• CVE-2025-1782緊急 9.9In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused …
• CVE-2023-23327中 4.9An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and database backups are stor…
• CVE-2023-23326中 5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low privilege user can inject arbitrary Javascr…
• CVE-2020-11766高 8.8sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.
• CVE-2017-18024中 6.1AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT eleme…