Palosanto Elastix vulnerabilities

• palosanto elastix SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier... CVE-2015-1875 Public exploit 7.5 HighMarch 11, 2015
• palosanto elastix Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers... CVE-2010-1492 5.0 MediumApril 23, 2010