CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-16966

An issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x before 15.0.8.21 for FreePBX 14.0.10.3. In the Contactmanager class (html\admin\modules\contactmanager\Contactmanager.class.php), an unsanitized group variable coming from the URL is reflected in HTML on 2 occasions, leading to XSS. It can be requested via a GET request to /admin/ajax.php?module=contactmanager.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.7%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-16966

Freepbx » Contactmanager » Version: 13.0.0

cpe:2.3:a:freepbx:contactmanager:13.0.0
Freepbx » Contactmanager » Version: 13.0.10

cpe:2.3:a:freepbx:contactmanager:13.0.10
Freepbx » Contactmanager » Version: 13.0.11

cpe:2.3:a:freepbx:contactmanager:13.0.11
Freepbx » Contactmanager » Version: 13.0.12

cpe:2.3:a:freepbx:contactmanager:13.0.12
Freepbx » Contactmanager » Version: 13.0.13

cpe:2.3:a:freepbx:contactmanager:13.0.13
Freepbx » Contactmanager » Version: 13.0.14

cpe:2.3:a:freepbx:contactmanager:13.0.14
Freepbx » Contactmanager » Version: 13.0.15

cpe:2.3:a:freepbx:contactmanager:13.0.15
Freepbx » Contactmanager » Version: 13.0.16

cpe:2.3:a:freepbx:contactmanager:13.0.16
Freepbx » Contactmanager » Version: 13.0.17

cpe:2.3:a:freepbx:contactmanager:13.0.17
Freepbx » Contactmanager » Version: 13.0.2

cpe:2.3:a:freepbx:contactmanager:13.0.2
Freepbx » Contactmanager » Version: 13.0.20

cpe:2.3:a:freepbx:contactmanager:13.0.20
Freepbx » Contactmanager » Version: 13.0.21

cpe:2.3:a:freepbx:contactmanager:13.0.21
Freepbx » Contactmanager » Version: 13.0.22

cpe:2.3:a:freepbx:contactmanager:13.0.22
Freepbx » Contactmanager » Version: 13.0.23

cpe:2.3:a:freepbx:contactmanager:13.0.23
Freepbx » Contactmanager » Version: 13.0.24

cpe:2.3:a:freepbx:contactmanager:13.0.24
Freepbx » Contactmanager » Version: 13.0.25

cpe:2.3:a:freepbx:contactmanager:13.0.25
Freepbx » Contactmanager » Version: 13.0.26

cpe:2.3:a:freepbx:contactmanager:13.0.26
Freepbx » Contactmanager » Version: 13.0.27

cpe:2.3:a:freepbx:contactmanager:13.0.27
Freepbx » Contactmanager » Version: 13.0.28

cpe:2.3:a:freepbx:contactmanager:13.0.28
Freepbx » Contactmanager » Version: 13.0.29

cpe:2.3:a:freepbx:contactmanager:13.0.29
Freepbx » Contactmanager » Version: 13.0.3

cpe:2.3:a:freepbx:contactmanager:13.0.3
Freepbx » Contactmanager » Version: 13.0.30

cpe:2.3:a:freepbx:contactmanager:13.0.30
Freepbx » Contactmanager » Version: 13.0.31

cpe:2.3:a:freepbx:contactmanager:13.0.31
Freepbx » Contactmanager » Version: 13.0.32

cpe:2.3:a:freepbx:contactmanager:13.0.32
Freepbx » Contactmanager » Version: 13.0.33

cpe:2.3:a:freepbx:contactmanager:13.0.33
Freepbx » Contactmanager » Version: 13.0.34

cpe:2.3:a:freepbx:contactmanager:13.0.34
Freepbx » Contactmanager » Version: 13.0.35

cpe:2.3:a:freepbx:contactmanager:13.0.35
Freepbx » Contactmanager » Version: 13.0.36

cpe:2.3:a:freepbx:contactmanager:13.0.36
Freepbx » Contactmanager » Version: 13.0.37

cpe:2.3:a:freepbx:contactmanager:13.0.37
Freepbx » Contactmanager » Version: 13.0.38

cpe:2.3:a:freepbx:contactmanager:13.0.38
Freepbx » Contactmanager » Version: 13.0.4

cpe:2.3:a:freepbx:contactmanager:13.0.4
Freepbx » Contactmanager » Version: 13.0.40

cpe:2.3:a:freepbx:contactmanager:13.0.40
Freepbx » Contactmanager » Version: 13.0.41

cpe:2.3:a:freepbx:contactmanager:13.0.41
Freepbx » Contactmanager » Version: 13.0.41.10

cpe:2.3:a:freepbx:contactmanager:13.0.41.10
Freepbx » Contactmanager » Version: 13.0.41.11

cpe:2.3:a:freepbx:contactmanager:13.0.41.11
Freepbx » Contactmanager » Version: 13.0.41.12

cpe:2.3:a:freepbx:contactmanager:13.0.41.12
Freepbx » Contactmanager » Version: 13.0.41.13

cpe:2.3:a:freepbx:contactmanager:13.0.41.13
Freepbx » Contactmanager » Version: 13.0.41.14

cpe:2.3:a:freepbx:contactmanager:13.0.41.14
Freepbx » Contactmanager » Version: 13.0.41.3

cpe:2.3:a:freepbx:contactmanager:13.0.41.3
Freepbx » Contactmanager » Version: 13.0.41.4

cpe:2.3:a:freepbx:contactmanager:13.0.41.4
Freepbx » Contactmanager » Version: 13.0.41.5

cpe:2.3:a:freepbx:contactmanager:13.0.41.5
Freepbx » Contactmanager » Version: 13.0.41.6

cpe:2.3:a:freepbx:contactmanager:13.0.41.6
Freepbx » Contactmanager » Version: 13.0.41.7

cpe:2.3:a:freepbx:contactmanager:13.0.41.7
Freepbx » Contactmanager » Version: 13.0.41.8

cpe:2.3:a:freepbx:contactmanager:13.0.41.8
Freepbx » Contactmanager » Version: 13.0.42

cpe:2.3:a:freepbx:contactmanager:13.0.42
Freepbx » Contactmanager » Version: 13.0.42.1

cpe:2.3:a:freepbx:contactmanager:13.0.42.1
Freepbx » Contactmanager » Version: 13.0.42.10

cpe:2.3:a:freepbx:contactmanager:13.0.42.10
Freepbx » Contactmanager » Version: 13.0.42.11

cpe:2.3:a:freepbx:contactmanager:13.0.42.11
Freepbx » Contactmanager » Version: 13.0.42.12

cpe:2.3:a:freepbx:contactmanager:13.0.42.12
Freepbx » Contactmanager » Version: 13.0.42.13

cpe:2.3:a:freepbx:contactmanager:13.0.42.13
Freepbx » Contactmanager » Version: 13.0.42.2

cpe:2.3:a:freepbx:contactmanager:13.0.42.2
Freepbx » Contactmanager » Version: 13.0.42.3

cpe:2.3:a:freepbx:contactmanager:13.0.42.3
Freepbx » Contactmanager » Version: 13.0.42.4

cpe:2.3:a:freepbx:contactmanager:13.0.42.4
Freepbx » Contactmanager » Version: 13.0.42.5

cpe:2.3:a:freepbx:contactmanager:13.0.42.5
Freepbx » Contactmanager » Version: 13.0.42.7

cpe:2.3:a:freepbx:contactmanager:13.0.42.7
Freepbx » Contactmanager » Version: 13.0.42.8

cpe:2.3:a:freepbx:contactmanager:13.0.42.8
Freepbx » Contactmanager » Version: 13.0.42.9

cpe:2.3:a:freepbx:contactmanager:13.0.42.9
Freepbx » Contactmanager » Version: 13.0.43

cpe:2.3:a:freepbx:contactmanager:13.0.43
Freepbx » Contactmanager » Version: 13.0.43.1

cpe:2.3:a:freepbx:contactmanager:13.0.43.1
Freepbx » Contactmanager » Version: 13.0.43.10

cpe:2.3:a:freepbx:contactmanager:13.0.43.10
Freepbx » Contactmanager » Version: 13.0.43.11

cpe:2.3:a:freepbx:contactmanager:13.0.43.11
Freepbx » Contactmanager » Version: 13.0.43.12

cpe:2.3:a:freepbx:contactmanager:13.0.43.12
Freepbx » Contactmanager » Version: 13.0.43.13

cpe:2.3:a:freepbx:contactmanager:13.0.43.13
Freepbx » Contactmanager » Version: 13.0.43.2

cpe:2.3:a:freepbx:contactmanager:13.0.43.2
Freepbx » Contactmanager » Version: 13.0.43.3

cpe:2.3:a:freepbx:contactmanager:13.0.43.3
Freepbx » Contactmanager » Version: 13.0.43.4

cpe:2.3:a:freepbx:contactmanager:13.0.43.4
Freepbx » Contactmanager » Version: 13.0.43.5

cpe:2.3:a:freepbx:contactmanager:13.0.43.5
Freepbx » Contactmanager » Version: 13.0.43.6

cpe:2.3:a:freepbx:contactmanager:13.0.43.6
Freepbx » Contactmanager » Version: 13.0.43.7

cpe:2.3:a:freepbx:contactmanager:13.0.43.7
Freepbx » Contactmanager » Version: 13.0.43.8

cpe:2.3:a:freepbx:contactmanager:13.0.43.8
Freepbx » Contactmanager » Version: 13.0.43.9

cpe:2.3:a:freepbx:contactmanager:13.0.43.9
Freepbx » Contactmanager » Version: 13.0.44

cpe:2.3:a:freepbx:contactmanager:13.0.44
Freepbx » Contactmanager » Version: 13.0.45

cpe:2.3:a:freepbx:contactmanager:13.0.45
Freepbx » Contactmanager » Version: 13.0.45.1

cpe:2.3:a:freepbx:contactmanager:13.0.45.1
Freepbx » Contactmanager » Version: 13.0.45.2

cpe:2.3:a:freepbx:contactmanager:13.0.45.2
Freepbx » Contactmanager » Version: 13.0.5

cpe:2.3:a:freepbx:contactmanager:13.0.5
Freepbx » Contactmanager » Version: 13.0.6

cpe:2.3:a:freepbx:contactmanager:13.0.6
Freepbx » Contactmanager » Version: 13.0.8

cpe:2.3:a:freepbx:contactmanager:13.0.8
Freepbx » Contactmanager » Version: 13.0.9

cpe:2.3:a:freepbx:contactmanager:13.0.9
Freepbx » Contactmanager » Version: 14.0.1

cpe:2.3:a:freepbx:contactmanager:14.0.1
Freepbx » Contactmanager » Version: 14.0.1.1

cpe:2.3:a:freepbx:contactmanager:14.0.1.1
Freepbx » Contactmanager » Version: 14.0.2

cpe:2.3:a:freepbx:contactmanager:14.0.2
Freepbx » Contactmanager » Version: 14.0.3

cpe:2.3:a:freepbx:contactmanager:14.0.3
Freepbx » Contactmanager » Version: 14.0.3.1

cpe:2.3:a:freepbx:contactmanager:14.0.3.1
Freepbx » Contactmanager » Version: 14.0.3.2

cpe:2.3:a:freepbx:contactmanager:14.0.3.2
Freepbx » Contactmanager » Version: 14.0.3.3

cpe:2.3:a:freepbx:contactmanager:14.0.3.3
Freepbx » Contactmanager » Version: 14.0.3.4

cpe:2.3:a:freepbx:contactmanager:14.0.3.4
Freepbx » Contactmanager » Version: 14.0.3.5

cpe:2.3:a:freepbx:contactmanager:14.0.3.5
Freepbx » Contactmanager » Version: 14.0.3.6

cpe:2.3:a:freepbx:contactmanager:14.0.3.6
Freepbx » Contactmanager » Version: 14.0.3.7

cpe:2.3:a:freepbx:contactmanager:14.0.3.7
Freepbx » Contactmanager » Version: 14.0.4

cpe:2.3:a:freepbx:contactmanager:14.0.4
Freepbx » Contactmanager » Version: 14.0.4.1

cpe:2.3:a:freepbx:contactmanager:14.0.4.1
Freepbx » Contactmanager » Version: 14.0.4.10

cpe:2.3:a:freepbx:contactmanager:14.0.4.10
Freepbx » Contactmanager » Version: 14.0.4.11

cpe:2.3:a:freepbx:contactmanager:14.0.4.11
Freepbx » Contactmanager » Version: 14.0.4.12

cpe:2.3:a:freepbx:contactmanager:14.0.4.12
Freepbx » Contactmanager » Version: 14.0.4.13

cpe:2.3:a:freepbx:contactmanager:14.0.4.13
Freepbx » Contactmanager » Version: 14.0.4.2

cpe:2.3:a:freepbx:contactmanager:14.0.4.2
Freepbx » Contactmanager » Version: 14.0.4.3

cpe:2.3:a:freepbx:contactmanager:14.0.4.3
Freepbx » Contactmanager » Version: 14.0.4.4

cpe:2.3:a:freepbx:contactmanager:14.0.4.4
Freepbx » Contactmanager » Version: 14.0.4.5

cpe:2.3:a:freepbx:contactmanager:14.0.4.5
Freepbx » Contactmanager » Version: 14.0.4.6

cpe:2.3:a:freepbx:contactmanager:14.0.4.6
Freepbx » Contactmanager » Version: 14.0.4.7

cpe:2.3:a:freepbx:contactmanager:14.0.4.7
Freepbx » Contactmanager » Version: 14.0.4.8

cpe:2.3:a:freepbx:contactmanager:14.0.4.8
Freepbx » Contactmanager » Version: 14.0.4.9

cpe:2.3:a:freepbx:contactmanager:14.0.4.9
Freepbx » Contactmanager » Version: 14.0.5

cpe:2.3:a:freepbx:contactmanager:14.0.5
Freepbx » Contactmanager » Version: 14.0.5.1

cpe:2.3:a:freepbx:contactmanager:14.0.5.1
Freepbx » Contactmanager » Version: 14.0.5.10

cpe:2.3:a:freepbx:contactmanager:14.0.5.10
Freepbx » Contactmanager » Version: 14.0.5.11

cpe:2.3:a:freepbx:contactmanager:14.0.5.11
Freepbx » Contactmanager » Version: 14.0.5.2

cpe:2.3:a:freepbx:contactmanager:14.0.5.2
Freepbx » Contactmanager » Version: 14.0.5.3

cpe:2.3:a:freepbx:contactmanager:14.0.5.3
Freepbx » Contactmanager » Version: 14.0.5.4

cpe:2.3:a:freepbx:contactmanager:14.0.5.4
Freepbx » Contactmanager » Version: 14.0.5.5

cpe:2.3:a:freepbx:contactmanager:14.0.5.5
Freepbx » Contactmanager » Version: 14.0.5.6

cpe:2.3:a:freepbx:contactmanager:14.0.5.6
Freepbx » Contactmanager » Version: 14.0.5.7

cpe:2.3:a:freepbx:contactmanager:14.0.5.7
Freepbx » Contactmanager » Version: 14.0.5.8

cpe:2.3:a:freepbx:contactmanager:14.0.5.8
Freepbx » Contactmanager » Version: 14.0.5.9

cpe:2.3:a:freepbx:contactmanager:14.0.5.9
Freepbx » Contactmanager » Version: 15.0.2

cpe:2.3:a:freepbx:contactmanager:15.0.2
Freepbx » Contactmanager » Version: 15.0.3

cpe:2.3:a:freepbx:contactmanager:15.0.3
Freepbx » Contactmanager » Version: 15.0.4

cpe:2.3:a:freepbx:contactmanager:15.0.4
Freepbx » Contactmanager » Version: 15.0.5

cpe:2.3:a:freepbx:contactmanager:15.0.5
Freepbx » Contactmanager » Version: 15.0.6

cpe:2.3:a:freepbx:contactmanager:15.0.6
Freepbx » Contactmanager » Version: 15.0.7

cpe:2.3:a:freepbx:contactmanager:15.0.7
Freepbx » Contactmanager » Version: 15.0.8

cpe:2.3:a:freepbx:contactmanager:15.0.8
Freepbx » Contactmanager » Version: 15.0.8.1

cpe:2.3:a:freepbx:contactmanager:15.0.8.1
Freepbx » Contactmanager » Version: 15.0.8.10

cpe:2.3:a:freepbx:contactmanager:15.0.8.10
Freepbx » Contactmanager » Version: 15.0.8.11

cpe:2.3:a:freepbx:contactmanager:15.0.8.11
Freepbx » Contactmanager » Version: 15.0.8.12

cpe:2.3:a:freepbx:contactmanager:15.0.8.12
Freepbx » Contactmanager » Version: 15.0.8.13

cpe:2.3:a:freepbx:contactmanager:15.0.8.13
Freepbx » Contactmanager » Version: 15.0.8.14

cpe:2.3:a:freepbx:contactmanager:15.0.8.14
Freepbx » Contactmanager » Version: 15.0.8.15

cpe:2.3:a:freepbx:contactmanager:15.0.8.15
Freepbx » Contactmanager » Version: 15.0.8.16

cpe:2.3:a:freepbx:contactmanager:15.0.8.16
Freepbx » Contactmanager » Version: 15.0.8.17

cpe:2.3:a:freepbx:contactmanager:15.0.8.17
Freepbx » Contactmanager » Version: 15.0.8.18

cpe:2.3:a:freepbx:contactmanager:15.0.8.18
Freepbx » Contactmanager » Version: 15.0.8.19

cpe:2.3:a:freepbx:contactmanager:15.0.8.19
Freepbx » Contactmanager » Version: 15.0.8.2

cpe:2.3:a:freepbx:contactmanager:15.0.8.2
Freepbx » Contactmanager » Version: 15.0.8.20

cpe:2.3:a:freepbx:contactmanager:15.0.8.20
Freepbx » Contactmanager » Version: 15.0.8.3

cpe:2.3:a:freepbx:contactmanager:15.0.8.3
Freepbx » Contactmanager » Version: 15.0.8.4

cpe:2.3:a:freepbx:contactmanager:15.0.8.4
Freepbx » Contactmanager » Version: 15.0.8.5

cpe:2.3:a:freepbx:contactmanager:15.0.8.5
Freepbx » Contactmanager » Version: 15.0.8.6

cpe:2.3:a:freepbx:contactmanager:15.0.8.6
Freepbx » Contactmanager » Version: 15.0.8.7

cpe:2.3:a:freepbx:contactmanager:15.0.8.7
Freepbx » Contactmanager » Version: 15.0.8.8

cpe:2.3:a:freepbx:contactmanager:15.0.8.8
Freepbx » Contactmanager » Version: 15.0.8.9

cpe:2.3:a:freepbx:contactmanager:15.0.8.9
Sangoma » Freepbx » Version: 14.0.10.3

cpe:2.3:a:sangoma:freepbx:14.0.10.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-16966

Products

Pricing

Contact Us