Vulnerabilities > Ifax > Hylafax > 0.2.0

DATE CVE VULNERABILITY TITLE RISK
2020-05-19 CVE-2020-11766 OS Command Injection vulnerability in multiple products
sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.
network
low complexity
ifax avantfax CWE-78
8.8