CVE-2008-6894 | BDVDB-2026-37682 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fName and (2) fPassword parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/32709
http://secunia.com/advisories/33060
http://marc.info/?l=full-disclosure&m=122868146707468&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/47167
http://osvdb.org/50599

Exploit#

No public exploit known

History#

Version 12009-08-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.