CVE-2020-36630

creationtimestamp| type| source ---|---|--- 2022-12-25 22:40:26+00:00| seen| https://t.me/cibsecurity/55322...

CVE-2020-36630

FreePBX cdr 14.0 is affected by a SQL injection in the ajaxHandler function of ucp/Cdr.class.php through manipulation of the limit/offset parameter. The issue is resolved by upgrading to version 14.0.5.21, with the patch identified as f1a9eea2dfff30fb99d825bac194a676a82b9ec8. Connected sources co...