VoipMonitor 漏洞列表

VoipMonitor prior to 24.61 is susceptible to remote code execution vulnerabilities because of its use of user supplied data via its web interface, allowing remote unauthenticated users to trigger a remote PHP code execution vulnerability.

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level. shodan-query: http.title:"VoIPmonitor" FOFA: title="VoIPmonitor"

VoipMonitor prior to 24.61 is susceptible to remote code execution vulnerabilities because of its use of user supplied data via its web interface, allowing remote unauthenticated users to trigger a remote PHP code execution vulnerability.

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.

VoIPmonitor存在远程代码执行漏洞，此漏洞是由于缺乏校验导致的。

VoIPmonitor是具有在Linux上运行的SIP RTP和RTCP VoIP协议的具有商业前端的开源网络数据包嗅探器。 v24.96之前的Voipmonitor GUI中存在SQL注入漏洞。允许攻击者将权限升级到管理员级别

VoIPmonitor是具有在Linux上运行的SIP RTP和RTCPVoIP协议的具有商业前端的开源网络数据包嗅探器。由于可以使用通过Web界面到达的用户提供的数据，允许未经身份验证的远程用户可以进行远程PHP代码执行。