Issabel Pbx
12 CVEs affecting Issabel Pbx. Latest disclosed: 2024-01-29. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37597 | High | 8.1 | 2023-07-11 | Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist fu… |
CVE-2023-37596 | High | 8.1 | 2023-07-11 | Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the dele… |
CVE-2023-37599 | High | 7.5 | 2023-07-13 | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory |
CVE-2023-34839 | Medium | 6.8 | 2023-06-27 | A Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain privileges via a Custom CSRF exploit to cre… |
CVE-2021-43695 | Medium | 6.1 | 2021-11-29 | issabelPBX version 2.11 is affected by a Cross Site Scripting (XSS) vulnerability. In file page.backup_restore.php, the exit function will terminate the script… |
CVE-2021-46558 | Medium | 5.4 | 2022-02-15 | Multiple cross-site scripting (XSS) vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to execute arbitrary web scripts or HTML vi… |
CVE-2023-37190 | Medium | 4.8 | 2023-07-11 | A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payl… |
CVE-2023-37189 | Medium | 4.8 | 2023-07-11 | A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or… |
CVE-2023-37191 | Medium | 4.8 | 2023-07-11 | A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payl… |
CVE-2021-34190 | Medium | 4.8 | 2021-07-06 | A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or… |
CVE-2024-0986 | Medium | 4.7 | 2024-01-29 | A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_… |
CVE-2023-37598 | Medium | 4.5 | 2023-07-13 | A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete new virtual fax… |