CVE-2008-6894

CVE-2008-6894

EPSS 1.1%

Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fName and (2) fPassword parameters.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://marc.info/?l=full-disclosure&m=122868146707468&w=2 http://osvdb.org/50599 http://secunia.com/advisories/33060 https://exchange.xforce.ibmcloud.com/vulnerabilities/47167 http://www.securityfocus.com/bid/32709