Lucene search
PRIOn knowledge basePRION:CVE-2012-4870HistorySep 06, 2012 - 5:55 p.m.
Cross site scripting
2012-09-0617:55:00
PRIOn knowledge base
www.prio-n.com
2
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php.
References
packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html
seclists.org/fulldisclosure/2012/Mar/234
secunia.com/advisories/48463
secunia.com/advisories/48475
www.freepbx.org/trac/ticket/5711
www.securityfocus.com/bid/52630
exchange.xforce.ibmcloud.com/vulnerabilities/74173
www.exploit-db.com/exploits/18649
Related
nvd
nvd
CVE-2012-4870
2012-09-06 17:55:02
cve
cve
CVE-2012-4870
2012-09-06 17:55:02
cvelist
cvelist
CVE-2012-4870
2012-09-06 17:00:00
openvas
openvas
FreePBX Multiple Cross Site Scripting and Remote Command Execution Vulnerabilities
2012-03-27 00:00:00
FreePBX 2.9.0 - 2.10.0 Multiple Vulnerabilities - Active Check
2012-03-27 00:00:00