Issabel-PBX-4.0.0-RCE-Authenticated

Issabel PBX 4.0.0 远程代码执行（已验证）- CVE-2024-0986 描述/总结 Issabel PBX 4.0.0 允许已登录用户使用 asteriskcli 控制台通过 xmldoc 和 dump 命令创建文件。这允许通过滥用 restore.php 文件，基于上传文件的名称执行远程命令。 本 PoC 脚本基于 此 PoC 视频。 使用方法 root@kitploit: $ python3 IssabelPBXAuthenticatedRCE.py -u -p -t -c 例如： root@kitploit: $ python3...

CVE-2024-0986

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

Exploit for OS Command Injection in Issabel Pbx

Issabel PBX 4.0.0 Remote Code Execution Authenticated - CVE-...

CVE-2024-0986

creationtimestamp| type| source ---|---|--- 2024-01-29 01:26:09+00:00| seen| https://t.me/ctinow/175035 2024-02-21 08:36:51+00:00| seen| https://t.me/ctinow/189341 2024-04-16 03:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7067 2024-04-16 06:27:50+00:00|...

CVE-2024-0986

CVE-2024-0986 affects Issabel PBX 4.0.0 through the Asterisk-Cli component. The vulnerability arises from improper handling of the Command argument in /index.php?menu=asterisk_cli, enabling OS command injection. Multiple connected sources describe this as an authenticated remote command execution...

CVE-2024-0986 Issabel PBX Asterisk-Cli os command injection

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...