CVE-2021-37454

Description

References

• 0xfml/poc · Exploit
• nch.com.au/pbx/index.html · Product

axon pbx의 다른 취약점

• CVE-2021-37462보통 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
• CVE-2021-37461보통 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
• CVE-2021-37460보통 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
• CVE-2021-37459보통 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
• CVE-2021-37458보통 5.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).