Code injection

2014-11-2013:55:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.0%

JSON

reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.

CPENameOperatorVersion
incredible_pbx_11eq2.0.6.5.0

CPE	Name	Operator	Version
	incredible_pbx_11	eq	2.0.6.5.0

References

seclists.org/fulldisclosure/2014/Oct/101