AvantFAX vulnerabilities

An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file. This vulnerability affects AvantFAX version 3.3.7.

An information disclosure vulnerability exists in AvantFAX 3.3.7. Backups of sent/received faxes and database backups are stored with the current date as the filename and hosted on the web server without access controls.

A stored Cross-Site Scripting (XSS) vulnerability in AvantFAX 3.3.7 allows an authenticated low-privilege user to inject arbitrary JavaScript into their email address, which executes when an administrator views the admin dashboard.