Vulnerabilities > Ifax > Hylafax

DATE CVE VULNERABILITY TITLE RISK
2020-05-19 CVE-2020-11766 Injection vulnerability in multiple products
sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.
network
low complexity
ifax avantfax CWE-74
6.5