📦 Completepbx

Xorcom CompletePBX versions up to 5.2.35 contain an authenticated command injection vulnerability in the administrator Task Scheduler functionality. Attackers with administrative access can execute ar...

Xorcom CompletePBX administrative control panel contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts via crafted URLs. This affects all administrat...

Xorcom CompletePBX versions through 5.2.35 contain an authenticated path traversal vulnerability in the Backup and Restore functionality. This allows authenticated attackers to read arbitrary files on...