CloudMap 漏洞情报库

高危2026/06/25

3CX Phone System - Installer Page Exposure

A 3CX Phone System installer or setup wizard page is publicly accessible. This web-based configuration tool is used for initial PBX setup including admin credential creation, SIP trunk configuration, license activation, and network settings. Exposure of this page allows unauthenticated attackers to reconfigure or take over the phone system.

3CXPoC 已收录

CVSS—

高危2023/10/20

3CX Management Console - Local File Inclusion

3CX Management Console is vulnerable to local file inclusion.

3CXPoC 已收录

CVSS7.5

高危2023/10/19

window.name - DOM Cross-Site Scripting

The window-name is vulnerable to DOM based cross-site scripting.

3CXPoC 已收录

CVSS7.2

3CX

关联漏洞

3CX Phone System - Installer Page Exposure

3CX Management Console - Local File Inclusion

window.name - DOM Cross-Site Scripting