Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreePBX 多个跨站脚本漏洞
Vulnerability Description
FreePBX（前称Asterisk Management Portal）是FreePBX项目的一套通过GUI（基于网页的图形化接口）配置Asterisk（IP电话系统）的工具。 FreePBX中存在多个跨站脚本漏洞，该漏洞源于对用户提供的输入未经正确过滤。攻击者可利用该漏洞盗取基于cookie的认证证书，或者在受影响应用程序上下文中执行任意命令。FreePBX 2.9版本和早期版本中存在这些漏洞，其他版本也可能受到影响。
CVSS Information
N/A
Vulnerability Type
N/A