CVE-2020-7351: Improper Neutralization of Special Elements used in an OS Command

An OS Command Injection vulnerability in the endpointdevicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. Note that Trixbox Community Edition has been unsupported by the vendor since 2012...

PT-2020-19566

Name of the Vulnerable Software and Affected Versions Fonality Trixbox Community Edition versions 1.2.0 through 2.8.0.4 Description An OS Command Injection issue in the endpoint devicemap.php component allows an attacker to execute commands on the underlying operating system as the "asterisk" use...