Vulnerabilities

TI-2015-01683 CVE-2015-1875 · GHSA-979w-5pw3-m5wg

SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and…

LOW 35

SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01267 Published 2015-03-11 No fix listed CWE-89

TI-2010-01442 CVE-2010-1492 · GHSA-7g2x-fpjf-rwm9

Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote…

LOW 26

Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01544 Published 2010-04-23 No fix listed CWE-22

Vulnerabilities

Filters

SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and…

Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote…