high8.8
CVE-2020-11766
sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.
Impact
sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ifax | Hylafax | from 0.2.0 before 0.2.5 |
| Avantfax | Avantfax | from 3.3.0 before 3.3.6 |