Issabel-PBX-4.0.0-RCE-Authenticated

Issabel PBX 4.0.0 تنفيذ الأوامر عن بُعد بعد المصادقة - CVE-2024-0986 الوصف/الملخص يسمح Issabel PBX 4.0.0 للمستخدم المُسجَّل الدخول باستخدام وحدة التحكم asteriskcli لإنشاء ملفات بأوامر xmldoc و dump. وهذا يسمح بتنفيذ أوامر عن بُعد بناءً على اسم الملفات المُحمَّلة باستغلال ملف restore.php. يعتمد هذ...

CVE-2024-0986

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

Exploit for OS Command Injection in Issabel Pbx

Issabel PBX 4.0.0 Remote Code Execution Authenticated - CVE-...

CVE-2024-0986

creationtimestamp| type| source ---|---|--- 2024-01-29 01:26:09+00:00| seen| https://t.me/ctinow/175035 2024-02-21 08:36:51+00:00| seen| https://t.me/ctinow/189341 2024-04-16 03:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7067 2024-04-16 06:27:50+00:00|...

CVE-2024-0986 Issabel PBX Asterisk-Cli os command injection

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

CVE-2024-0986

CVE-2024-0986 affects Issabel PBX 4.0.0 through the Asterisk-Cli component. The vulnerability arises from improper handling of the Command argument in /index.php?menu=asterisk_cli, enabling OS command injection. Multiple connected sources describe this as an authenticated remote command execution...