CVE-2014-9001

2022-10-0316:20:39

mitre

www.cve.org

incredible pbx 11

remote users

arbitrary commands

shell metacharacters

security vulnerability

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.

References

seclists.org/fulldisclosure/2014/Oct/101