Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: VICIdial 3555 Clear all filters
TI-2022-15676 CVE-2022-34879 · GHSA-4gg9-66fr-r99m

Cross-site scripting in VICIdial

Priority LOW 30

Reflected Cross Site Scripting (XSS) vulnerabilities in AST Agent Time Sheet interface (/vicidial/AST_agent_time_sheet.php) of VICIdial via agent, and search_archived_data parameters.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00535 Published 2022-07-05 Fixed in 3555 CWE-79
TI-2022-15675 CVE-2022-34878 · GHSA-ffxp-v57g-86fj

VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.

Priority MEDIUM 44

SQL Injection vulnerability in User Stats interface (/vicidial/user_stats.php) of VICIdial via the file_download parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of al…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0336 Published 2022-07-05 Fixed in 3555 CWE-89
TI-2022-15674 CVE-2022-34877 · GHSA-5mpj-2x3p-rv6q

SQL injection in VICIdial

Priority MEDIUM 44

SQL Injection vulnerability in AST Agent Time Sheet interface ((/vicidial/AST_agent_time_sheet.php) of VICIdial via the agent parameter allows attacker to spoof identity, tamper with existing data, allow the complete dis…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03388 Published 2022-07-05 Fixed in 3555 CWE-89
TI-2022-15673 CVE-2022-34876 · GHSA-vm9r-p8vp-v2fj

VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.

Priority MEDIUM 44

SQL Injection vulnerability in admin interface (/vicidial/admin.php) of VICIdial via modify_email_accounts, access_recordings, and agentcall_email parameters allows attacker to spoof identity, tamper with existing data,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03449 Published 2022-07-05 Fixed in 3555 CWE-89