FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — SQLi non authentifié à RCE racine Sévérité: Critique Type: Injection SQL non authentifiée → Exécution de code à distance Logiciel concerné: FreePBX module endpoint Testé sur: FreePBX sous CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Aperçu Une vulnérabilité d'injection SQL...

FreePBX SQL Injection Vulnerability (CNVD-2025-3038208)

FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. FreePBX suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered S...