CVE

Id
58113  
CVE No.
CVE-2012-4870  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php.  
Phase
Assigned (20120906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597182 58113 CVE-2012-4870 EXPLOIT-DB:18649  View
597183 58113 CVE-2012-4870 URL:http://www.exploit-db.com/exploits/18649  View
597184 58113 CVE-2012-4870 FULLDISC:20120320 FreePBX remote command execution, xss  View
597185 58113 CVE-2012-4870 URL:http://seclists.org/fulldisclosure/2012/Mar/234  View
597186 58113 CVE-2012-4870 MISC:http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html  View
597187 58113 CVE-2012-4870 CONFIRM:http://www.freepbx.org/trac/ticket/5711  View
597188 58113 CVE-2012-4870 BID:52630  View
597189 58113 CVE-2012-4870 URL:http://www.securityfocus.com/bid/52630  View
597190 58113 CVE-2012-4870 SECUNIA:48463  View
597191 58113 CVE-2012-4870 URL:http://secunia.com/advisories/48463  View
597192 58113 CVE-2012-4870 SECUNIA:48475  View
597193 58113 CVE-2012-4870 URL:http://secunia.com/advisories/48475  View
597194 58113 CVE-2012-4870 XF:freepbx-multiple-xss(74173)  View

Related JVN