RSS   Podatności dla 'Elastix'   RSS

2015-03-11
 
CVE-2015-1875

 
 
SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter.

 
2010-04-23
 
CVE-2010-1492

CWE-22
 
 
Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id_nodo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

 

Copyright 2024, cxsecurity.com

 

Back to Top