CVE-2009-4038

Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score
CVSS 2.0 4.3 Medium
Status
Modified - cve@mitre.org
Published
2009-11-20
Last modified
2024-09-16
Weaknesses
CWE-79

Affected products

References

 
 
© AVABIS GmbH privacypolicy about