Vulnerabilities in VICIdial
6 resultsVexday analysis
VICIdial apresenta 6 vulnerabilidades conhecidas, com 1 classificada como crítica, mas nenhuma sob exploração ativa documentada no momento. A fraqueza dominante é injeção SQL (CWE-89), vetor clássico e de alto risco, porém sem atividade recente na base que indique pressão imediata de ataque.
CVE-2024-8503CRITICALVICIdial Unauthenticated SQL InjectionEPSS 80.2%CVE-2024-8504HIGHVICIdial Authenticated Remote Code ExecutionEPSS 76.2%CVE-2022-34876MEDIUMVICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.EPSS 3.3%CVE-2022-34877MEDIUMVICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php.EPSS 3.2%CVE-2022-34878MEDIUMVICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.EPSS 3.2%CVE-2022-34879MEDIUMVICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple Cross Site Scripting (XSS) vulnerabilities at /vicidial/admin.php.EPSS 0.5%