Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fName and (2) fPassword parameters.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2009-08-03 18:30
Updated : 2024-02-04 17:33
NVD link : CVE-2008-6894
Mitre link : CVE-2008-6894
CVE.ORG link : CVE-2008-6894
JSON object : View
Products Affected
3cx
- phone_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')