Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2023-37599

Disclosure Date: July 13, 2023 (last updated February 25, 2025)
An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory
Attacker Value
Unknown

CVE-2023-37598

Disclosure Date: July 13, 2023 (last updated February 25, 2025)
A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete new virtual fax function.
Attacker Value
Unknown

CVE-2023-37597

Disclosure Date: July 11, 2023 (last updated February 25, 2025)
Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist function.
Attacker Value
Unknown

CVE-2023-37596

Disclosure Date: July 11, 2023 (last updated February 25, 2025)
Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function.
Attacker Value
Unknown

CVE-2023-37190

Disclosure Date: July 11, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature.
Attacker Value
Unknown

CVE-2023-37191

Disclosure Date: July 11, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters.
Attacker Value
Unknown

CVE-2023-34839

Disclosure Date: June 27, 2023 (last updated February 25, 2025)
A Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain privileges via a Custom CSRF exploit to create new user function in the application.