Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Phoniebox Clear all filters
TI-2024-03545 CVE-2024-3799 · GHSA-98h6-g9rg-hxmr

Shell command injection in Phoniebox

Priority MEDIUM 55

Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malic…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.14573 Published 2024-07-10 Fixed in 3.0 CWE-78
TI-2024-03544 CVE-2024-3798 · GHSA-954r-8vpp-vj52

Insecure handling of GET argument in Phoniebox

Priority MEDIUM 44

Insecure handling of GET header parameter file included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malici…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00477 Published 2024-07-10 Fixed in 3.0 CWE-352