Goautodial

8 CVEs across 4 Goautodial products. Browse Goautodial vulnerabilities, severities, and proof-of-concept exploits.

Goautodial products with known CVEs

ProductCVEs
Goadmin Ce4
Goautodial4
Goautodial API2
Goautodial API2
Goautodial CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25316Medium6.42026-02-11GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the event title…
CVE-2020-37018Medium6.42026-01-29GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through message subjects…
CVE-2021-43176High8.82021-12-07The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to locate and…
CVE-2021-43175High7.52021-12-07The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action that routes to other…
CVE-2015-28452015-05-12The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion o…
CVE-2015-28442015-05-12The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion…
CVE-2015-28432015-05-12Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user…
CVE-2015-28422015-05-12Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-142190…