Vulnerabilities

TI-2018-12388 CVE-2018-17387 · GHSA-6h98-5j68-5vxw

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account.

MEDIUM 40

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00911 Published 2019-06-19 No fix listed CWE-352

TI-2018-12389 CVE-2018-17388 · GHSA-qqj7-f934-r35q

SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password…

MEDIUM 46

SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to login_check.php, or the id parameter to add_email.php or edit_content.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0229 Published 2019-06-19 No fix listed CWE-89

TI-2018-12390 CVE-2018-17389 · GHSA-63rh-g9m2-2rq8

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account.

MEDIUM 40

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00911 Published 2019-06-19 No fix listed CWE-352

Vulnerabilities

Filters

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account.

SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password…

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account.