Issabel

12 CVEs across 1 Issabel products. Browse Issabel vulnerabilities, severities, and proof-of-concept exploits.

Issabel products with known CVEs

ProductCVEs
Pbx12
Issabel CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-0986Medium4.72024-01-29A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_…
CVE-2023-37599High7.52023-07-13An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory
CVE-2023-37598Medium4.52023-07-13A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete new virtual fax…
CVE-2023-37597High8.12023-07-11Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist fu…
CVE-2023-37596High8.12023-07-11Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the dele…
CVE-2023-37190Medium4.82023-07-11A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payl…
CVE-2023-37189Medium4.82023-07-11A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or…
CVE-2023-37191Medium4.82023-07-11A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payl…
CVE-2023-34839Medium6.82023-06-27A Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain privileges via a Custom CSRF exploit to cre…
CVE-2021-46558Medium5.42022-02-15Multiple cross-site scripting (XSS) vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to execute arbitrary web scripts or HTML vi…
CVE-2021-43695Medium6.12021-11-29issabelPBX version 2.11 is affected by a Cross Site Scripting (XSS) vulnerability. In file page.backup_restore.php, the exit function will terminate the script…
CVE-2021-34190Medium4.82021-07-06A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or…