Approved changes feed: RSS · Atom

cpe:2.3:a:forip:pabx:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorForip (35fb7458-fd19-5b52-bd2f-0508e030c74c)
ProductPabx (0082e0a0-c8c5-5cfa-93c3-0177a721e1da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7105 vulnerable 2026-06-08 06:58:21.266936 ForIP Tecnologia Administração PABX Lista Ura Page detalheIdUra sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in ForIP Tecnologia Administração PABX 1.x. Affected is an unknown function of the file /detalheIdUra of the component Lista Ura Page. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272430 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-25T20:31:04.725Z
Updated: 2024-08-01T21:52:30.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7101 vulnerable 2026-06-08 06:58:21.261932 ForIP Tecnologia Administração PABX Authentication Form login sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in ForIP Tecnologia Administração PABX 1.x. This issue affects some unknown processing of the file /login of the component Authentication Form. The manipulation of the argument usuario leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272423. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-25T16:00:07.633Z
Updated: 2024-08-01T21:52:30.531Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.