U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): elastix
  • Search Type: Search All
There are 3 matching records.
Displaying matches 1 through 3.
Vuln ID Summary CVSS Severity

SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter.

Published: March 11, 2015; 10:59:05 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH

Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter.

Published: November 25, 2013; 2:55:03 PM -0500
V3.x:(not available)
V2.0: 4.3 MEDIUM

Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id_nodo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Published: April 23, 2010; 10:30:01 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM