Fusionpbx vulnerabilities

Products

• Fusionpbx 54

Newest

• fusionpbx FusionPBX Dialplan Editor dialplan.php os command injection CVE-2026-112195 Public exploit 5.1 MediumOctober 19, 2026
• fusionpbx FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Download CVE-2026-108161 7.7 HighOctober 10, 2026
• fusionpbx FusionPBX before 5.2.0 does not validate a session. CVE-2024-24539 5.3 MediumMarch 18, 2024
• fusionpbx FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is... CVE-2024-23387 4.8 MediumJanuary 19, 2024
• fusionpbx FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php. CVE-2022-35153 9.8 CriticalAugust 18, 2022
• fusionpbx Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users... CVE-2021-37524 6.1 MediumJuly 1, 2022
• fusionpbx Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs... CVE-2022-28055 9.8 CriticalMay 4, 2022
• fusionpbx An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an... CVE-2021-43403 6.5 MediumNovember 5, 2021
• fusionpbx An issue was discovered in FusionPBX before 4.5.30. The fax_extension may have risky characters ... CVE-2021-43405 Public exploit EPSS 35.6% 8.8 HighNovember 5, 2021
• fusionpbx An issue was discovered in FusionPBX before 4.5.30. The fax_post_size may have risky characters ... CVE-2021-43406 8.8 HighNovember 5, 2021
• fusionpbx An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters. CVE-2021-43404 8.8 HighNovember 5, 2021
• fusionpbx Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to... CVE-2020-21057 8.1 HighMay 20, 2021
• fusionpbx Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user... CVE-2020-21056 4.3 MediumMay 20, 2021
• fusionpbx A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename... CVE-2020-21055 6.5 MediumMay 20, 2021
• fusionpbx Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to... CVE-2020-21054 6.1 MediumMay 20, 2021
• fusionpbx Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users... CVE-2020-21053 6.1 MediumMay 20, 2021
• fusionpbx A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows... CVE-2019-19384 6.1 MediumNovember 28, 2019
• fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1... CVE-2019-19385 6.1 MediumNovember 28, 2019
• fusionpbx A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php... CVE-2019-19386 6.1 MediumNovember 28, 2019
• fusionpbx A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4... CVE-2019-19387 6.1 MediumNovember 28, 2019
• fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX... CVE-2019-19388 6.1 MediumNovember 28, 2019
• fusionpbx A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1... CVE-2019-19366 6.1 MediumNovember 27, 2019
• fusionpbx A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows... CVE-2019-19367 6.1 MediumNovember 27, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\extensions\extension_imports.php uses an unsanitized ... CVE-2019-16977 6.1 MediumOctober 23, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\contacts\contact_notes.php uses an unsanitized "id"... CVE-2019-16975 6.1 MediumOctober 23, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\destinations\destination_imports.php uses an unsanitized ... CVE-2019-16976 6.1 MediumOctober 23, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\contacts\contact_edit.php uses an unsanitized ... CVE-2019-16973 6.1 MediumOctober 22, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\contacts\contact_addresses.php uses an unsanitized "id"... CVE-2019-16972 6.1 MediumOctober 22, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\messages\messages_thread.php uses an unsanitized ... CVE-2019-16971 6.1 MediumOctober 22, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\contacts\contact_times.php uses an unsanitized "id"... CVE-2019-16974 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\fifo_list\fifo_interactive.php uses an unsanitized "c"... CVE-2019-16969 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to 4.5.7, the file app\sip_status\sip_status.php uses an unsanitized "savemsg"... CVE-2019-16970 6.1 MediumOctober 21, 2019
• fusionpbx An issue was discovered in FusionPBX up to 4.5.7. In the file app\conference_controls... CVE-2019-16968 6.1 MediumOctober 21, 2019
• fusionpbx resources/cmd.php in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to... CVE-2019-16965 7.2 HighOctober 21, 2019
• fusionpbx app/call_centers/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a... CVE-2019-16964 8.8 HighOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\basic_operator_panel\resources\content.php uses an... CVE-2019-16988 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\edit\filedelete.php uses an unsanitized "file" variable... CVE-2019-16991 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\conferences_active\conference_interactive.php uses an... CVE-2019-16989 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file resources\download.php uses an unsanitized "f" variable... CVE-2019-16986 6.5 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\contacts\contact_import.php uses an unsanitized ... CVE-2019-16987 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\xml_cdr\xml_cdr_delete.php uses an unsanitized "rec"... CVE-2019-16985 6.5 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\recordings\recording_play.php uses an unsanitized ... CVE-2019-16984 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file resources\paging.php has a paging function (called by several... CVE-2019-16983 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\conference_profiles\conference_profile_params.php uses an... CVE-2019-16981 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\access_controls\access_control_nodes.php uses an... CVE-2019-16982 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app/music_on_hold/music_on_hold.php uses an unsanitized "file... CVE-2019-16990 6.5 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\contacts\contact_urls.php uses an unsanitized "id"... CVE-2019-16979 6.1 MediumOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\call_broadcast\call_broadcast_edit.php uses an... CVE-2019-16980 8.8 HighOctober 21, 2019
• fusionpbx In FusionPBX up to v4.5.7, the file app\devices\device_settings.php uses an unsanitized "id"... CVE-2019-16978 6.1 MediumOctober 21, 2019
• fusionpbx FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious... CVE-2019-15029 Public exploit EPSS 12.3% 8.8 HighSeptember 5, 2019
• Show olderLoading…