Vulnerabilities in GOautodial
4 resultsCVE-2021-43176—The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extenEPSS 1.3%CVE-2021-43175—The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action thEPSS 1.2%CVE-2020-37018MEDIUMGOautodial 4.0 - Persistent Cross-Site ScriptingEPSS 0.2%CVE-2019-25316MEDIUMGOautodial 4.0 - 'CreateEvent' Persistent Cross-Site ScriptingEPSS 0.2%