Vicidial vulnerabilities

Products

• Vicidial 11

Newest

• vicidial VICIdial Authenticated Remote Code Execution CVE-2024-8504 Public exploit EPSS 76.2% 8.8 HighSeptember 10, 2024
• vicidial VICIdial Unauthenticated SQL Injection CVE-2024-8503 Public exploit EPSS 79.3% 9.8 CriticalSeptember 10, 2024
• vicidial Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers... CVE-2021-35377 6.1 MediumMarch 6, 2023
• vicidial VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple Cross Site Scripting (XSS) vulnerabilities at /vicidial/admin.php. CVE-2022-34879 6.5 MediumJuly 5, 2022
• vicidial VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php. CVE-2022-34878 5.5 MediumJuly 5, 2022
• vicidial VICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php. CVE-2022-34877 6.4 MediumJuly 5, 2022
• vicidial VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php. CVE-2022-34876 5.5 MediumJuly 5, 2022
• vicidial Vicidial 2.14-783a was discovered to contain a cross-site scripting (XSS) vulnerability via the... CVE-2021-46557 5.4 MediumFebruary 15, 2022
• vicidial VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded... CVE-2013-7382 Public exploit 5.0 MediumMay 17, 2014
• vicidial VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote... CVE-2013-4468 Public exploit EPSS 32.3% 6.5 MediumMay 14, 2014
• vicidial Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka... CVE-2013-4467 Public exploit EPSS 31.4% 6.5 MediumMarch 11, 2014
• vicidial call center suite Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow... CVE-2009-2234 Public exploit 7.5 HighJune 27, 2009