EUVD-2020-3110

Malware in sbrugna...

CVE-2020-10666

The restapps aka Rest Phone apps module for Sangoma FreePBX and PBXact 13, 14, and 15 through 15.0.19.2 allows remote code execution via a URL variable to an AMI command...

Sangoma FreePBX Code Injection Vulnerability

FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX Freepbx project for configuring Asterisk an IP phone system through a GUI web-based graphical interface. A code injection vulnerability exists in Sangoma FreePBX and PBXact versions 13, 14, 15 through 15.0.19....

CVE-2020-10666

The Restapps (Rest Phone apps) module in Sangoma FreePBX and PBXact (versions 13–15 up to 15.0.19.2) is vulnerable to remote code execution via a URL variable to an AMI command. Root cause is a flaw in Restapps’ handling of AMI commands that allows injection. Impact per sources is high (remote, n...

CVE-2020-10666

The restapps aka Rest Phone apps module for Sangoma FreePBX and PBXact 13, 14, and 15 through 15.0.19.2 allows remote code execution via a URL variable to an AMI command...

PT-2021-9166

Name of the Vulnerable Software and Affected Versions Sangoma FreePBX and PBXact versions 13 through 15.0.19.2 Description The issue allows remote code execution via a URL variable to an AMI command. This is related to the restapps module, also known as Rest Phone apps. Recommendations For versio...

CVE-2020-10666: Improper Neutralization of Special Elements used in a Command

The restapps aka Rest Phone apps module for Sangoma FreePBX and PBXact 13, 14, and 15 through 15.0.19.2 allows remote code execution via a URL variable to an AMI command...