VYPR

Backup & Restore module

by Freepbx

CVEs (1)

  • CVE-2019-19615MedMar 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Multiple XSS vulnerabilities exist in the Backup & Restore module \ v14.0.10.2 through v14.0.10.7 for FreePBX, as shown at /admin/config.php?display=backup on the FreePBX Administrator web site. An attacker can modify the id parameter of the backup configuration screen and embed…