← All advisories

High severity8.8NVD Advisory· Published May 19, 2020· Updated Jun 17, 2026

CVE-2020-11766

CVE-2020-11766

Description

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.

Affected products

4

AvantFAX/AvantFAX2 versions
cpe:2.3:a:avantfax:avantfax:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:avantfax:avantfax:*:*:*:*:*:*:*:*range: >=3.3.0,<3.3.6
- (no CPE)range: <3.3.6
Ifax/Hylafax
cpe:2.3:a:ifax:hylafax:*:*:*:*:enterprise:*:*:*
Range: >=0.2.0,<0.2.5
Hylafax/HylaFAX Enterprise Web Interfacellm-create
Range: <0.2.5

Patches

Vulnerability mechanics

References

1

ftp.ifax.com/security/CVE-2020-11766.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.