VICIdial kayıtları
vicidial üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 7 · %58,3
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-255 Credentials Management Errors1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
63Bu hafta | CVE-2024-8503Silahlaştırılmış | VICIdial Unauthenticated SQL Injectionvicidial · vicidial · CWE-89 | Kritik9,8 | — | %79,3 | 10 Eyl 2024 |
58Planlayın | CVE-2024-8504Silahlaştırılmış | VICIdial Authenticated Remote Code Executionvicidial · vicidial · CWE-78 | Yüksek8,8 | — | %76,2 | 10 Eyl 2024 |
36İzleyin | CVE-2013-4468Silahlaştırılmış | VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commandsvicidial · vicidial | Orta6,5 | — | %32,3 | 14 May 2014 |
36İzleyin | CVE-2022-34876Silahlaştırılmış | VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.vicidial · vicidial · CWE-89 | Yüksek8,8 | — | %3,4 | 5 Tem 2022 |
36İzleyin | CVE-2022-34877Silahlaştırılmış | VICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php.vicidial · vicidial · CWE-89 | Yüksek8,8 | — | %3,3 | 5 Tem 2022 |
36İzleyin | CVE-2022-34878Silahlaştırılmış | VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.vicidial · vicidial · CWE-89 | Yüksek8,8 | — | %3,3 | 5 Tem 2022 |
35İzleyin | CVE-2013-4467Silahlaştırılmış | Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, andvicidial · vicidial · CWE-89 | Orta6,5 | — | %31,6 | 11 Mar 2014 |
30İzleyin | CVE-2009-2234Kavram kanıtı | Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL vicidial · call center suite · CWE-89 | Yüksek7,5 | — | %1,0 | 27 Haz 2009 |
24İzleyin | CVE-2022-34879İstismar yok | VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple Cross Site Scripting (XSS) vulnerabilities at /vicidial/admin.php.vicidial · vicidial · CWE-79 | Orta6,1 | — | %0,5 | 5 Tem 2022 |
24İzleyin | CVE-2021-35377İstismar yok | Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidiavicidial · vicidial · CWE-79 | Orta6,1 | — | %0,4 | 6 Mar 2023 |
21İzleyin | CVE-2013-7382Kavram kanıtı | VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) vicidial · vicidial · CWE-255 | Orta5,0 | — | %2,8 | 17 May 2014 |
21İzleyin | CVE-2021-46557İstismar yok | Vicidial 2.14-783a was discovered to contain a cross-site scripting (XSS) vulnerability via the input tabs.vicidial · vicidial · CWE-79 | Orta5,4 | — | %0,6 | 15 Şub 2022 |
- CVE-2024-850363Bu hafta
VICIdial Unauthenticated SQL Injection
KritikCVSS 9,8SilahlaştırılmışEPSS %79vicidial · vicidial10 Eyl 2024
- CVE-2024-850458Planlayın
VICIdial Authenticated Remote Code Execution
YüksekCVSS 8,8SilahlaştırılmışEPSS %76vicidial · vicidial10 Eyl 2024
- CVE-2013-446836İzleyin
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands
OrtaCVSS 6,5SilahlaştırılmışEPSS %32vicidial · vicidial14 May 2014
- CVE-2022-3487636İzleyin
VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.
YüksekCVSS 8,8SilahlaştırılmışEPSS %3vicidial · vicidial5 Tem 2022
- CVE-2022-3487736İzleyin
VICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php.
YüksekCVSS 8,8SilahlaştırılmışEPSS %3vicidial · vicidial5 Tem 2022
- CVE-2022-3487836İzleyin
VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.
YüksekCVSS 8,8SilahlaştırılmışEPSS %3vicidial · vicidial5 Tem 2022
- CVE-2013-446735İzleyin
Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and
OrtaCVSS 6,5SilahlaştırılmışEPSS %32vicidial · vicidial11 Mar 2014
- CVE-2009-223430İzleyin
Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL
YüksekCVSS 7,5Kavram kanıtıEPSS %1vicidial · call center suite27 Haz 2009
- CVE-2022-3487924İzleyin
VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple Cross Site Scripting (XSS) vulnerabilities at /vicidial/admin.php.
OrtaCVSS 6,1İstismar yokEPSS %1vicidial · vicidial5 Tem 2022
- CVE-2021-3537724İzleyin
Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidia
OrtaCVSS 6,1İstismar yokEPSS %0vicidial · vicidial6 Mar 2023
- CVE-2013-738221İzleyin
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2)
OrtaCVSS 5,0Kavram kanıtıEPSS %3vicidial · vicidial17 May 2014
- CVE-2021-4655721İzleyin
Vicidial 2.14-783a was discovered to contain a cross-site scripting (XSS) vulnerability via the input tabs.
OrtaCVSS 5,4İstismar yokEPSS %1vicidial · vicidial15 Şub 2022