Approved changes feed: RSS · Atom

cpe:2.3:a:voipmonitor:voipmonitor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVoipmonitor (de0ca406-8012-5057-8c7a-c96ac9d129f6)
ProductVoipmonitor (f52b249f-339b-5ac4-86be-002659475c4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/donatello/voipmonitor purl2cpe 2026-06-01 10:17:55.787719
pkg:github/wolrah/voipmonitor purl2cpe 2026-06-01 10:17:55.787723
pkg:rpm/opensuse/voipmonitor purl2cpe 2026-06-01 10:17:55.787725
pkg:sourceforge/voipmonitor purl2cpe 2026-06-01 10:17:55.787728

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-24262 vulnerable 2026-06-08 05:40:59.771317 Details available
The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.
Published: 2022-02-04T16:10:31.000Z
Updated: 2024-08-03T04:07:02.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24260 vulnerable 2026-06-08 05:40:59.770994 Details available
A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.
Published: 2022-02-04T16:10:29.000Z
Updated: 2024-08-03T04:07:02.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24259 vulnerable 2026-06-08 05:40:59.770579 Details available
An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.
Published: 2022-02-04T16:10:29.000Z
Updated: 2024-08-03T04:07:02.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30461 vulnerable 2026-06-08 05:31:51.032355 Details available
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value (which might contain PHP code) is injected into config/configuration.php.
Published: 2021-05-29T13:02:12.000Z
Updated: 2024-08-03T22:32:41.062Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.