CVE-2024-28722

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-28722
Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xml_modes.xml endpoint
CVSS

No CVSS.

References
Link Resource
http://innovaphone.com
http://mypbx.com
https://wiki.innovaphone.com/index.php?title=Reference14r1:Release_Notes_Firmware#159317_-_Advanced_UI:_Prevent_XSL_injection
Configurations

No configuration.

History

22 Apr 2024, 13:28

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de Cross Site Scripting en Innovaphone myPBX v.14r1, v.13r3, v.12r2 permite a un atacante remoto ejecutar código arbitrario a través del parámetro de consulta en el endpoint /CMD0/xml_modes.xml

22 Apr 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-22 01:15

Updated : 2024-04-22 13:28

NVD link : CVE-2024-28722

Mitre link : CVE-2024-28722

CVE.ORG link : CVE-2024-28722

JSON object : View

Products Affected

No product.

CWE

No CWE.