FreePBX Framework modulefunctions.class.php display SQL Injection

A SQL injection vulnerability exists in FreePBX. Successful exploitation could lead to arbitrary command execution on the affected system...

FreePBX Framework Recordings Module Remote Command Execution

A remote command execution vulnerability exists in FreePBX. The vulnerability is due to an input validation issue in the Recordings module. A remote unauthenticated attacker can exploit this vulnerability by sending maliciously crafted requests to the page. Successful exploitation could lead to...

FreePBX 3.0.x RCE Vulnerability - Active Check

FreePBX is prone to a unauthenticated remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreePBX 13.0.x Code Execution

Vulnerable software : Freepbx Tested versions : 13.0.x $this-commandline = $commandline; $this-cwd = $cwd; Line 275 $commandline = $this-commandline; if '\' === DIRECTORYSEPARATOR && $this-enhanceWindowsCompatibility $commandline = 'cmd /V:ON /E:ON /C "'.$commandline.''; foreach...

FreePBX 13.0.x < 13.0.154 - Remote Command Execution

Vulnerable software : Freepbx Tested versions : 13.0.x $this-commandline = $commandline; $this-cwd = $cwd; Line 275 $commandline = $this-commandline; if '\' === DIRECTORYSEPARATOR && $this-enhanceWindowsCompatibility $commandline = 'cmd /V:ON /E:ON /C "'.$commandline.''; foreach...

FreePBX 13.0.x 13.0.154 - Remote Command Execution

FreePBX 13.0.x 13.0.154 - Remote Command Execution Vulnerable software : Freepbx Tested versions : 13.0.x $this-commandline = $commandline; $this-cwd = $cwd; Line 275 $commandline = $this-commandline; if '\' === DIRECTORYSEPARATOR && $this-enhanceWindowsCompatibility $commandline = 'cmd /V:ON...

FreePBX 13.0.x < 13.0.154 - Unauthenticated Remote Command Execution

Exploit for php platform in category web applications Vulnerable software : Freepbx Tested versions : 13.0.x $this-commandline = $commandline; $this-cwd = $cwd; Line 275 $commandline = $this-commandline; if '\' === DIRECTORYSEPARATOR && $this-enhanceWindowsCompatibility $commandline = 'cmd /V:ON...

FreePBX 13.0.35 remote code execution

A vulnerability overview 1. Vulnerability description FreePBX is called the Asterisk Management Portal, IP telephony tools Asterisk standardized implementation that provides a Web configuration interface and other workers FreePBX in functions.inc.php file exists for the parameters without...

FreePBX 13.0.35 - SQL injection

No description provided by source...

FreePBX 'functions.inc.php' file remote code execution vulnerability

FreePBX is an Asterisk Dynamic IPPBX package developed using Linux, Apache, MySQL and PHP technologies. The functions.inc.php file in FreePBX has unfiltered parameters that are spliced directly into exec, which can be exploited to cause remote command execution...

FreePBX 13.0.35 - SQL Injection

Exploit for php platform in category web applications Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : i-Hmx Email : email protected Home : sec4ever.com Freepbx suffer from unauthenticated sql injection flaw due to insufficient sanitization of "display" paramet...

FreePBX 13.0.35 - SQL Injection

Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : i-Hmx Email : [email protected] Home : sec4ever.com Freepbx suffer from unauthenticated sql injection flaw due to insufficient sanitization of "display" parameter File : admin/libraries/DB.class.php public functi...

FreePBX 13.0.35 - SQL Injection

FreePBX 13.0.35 - SQL Injection Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : i-Hmx Email : [email protected] Home : sec4ever.com Freepbx suffer from unauthenticated sql injection flaw due to insufficient sanitization of "display" parameter File :...

FreePBX 13.0.35 - Remote Command Execution

FreePBX 13.0.35 - Remote Command Execution Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : Ahmed sultan 0x4148 Email : [email protected] Summary : FreePBX is a web-based open source GUI graphical user interface that controls and manages Asterisk PBX, an open...

FreePBX 13.0.35 - Remote Command Execution

Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : Ahmed sultan 0x4148 Email : [email protected] Summary : FreePBX is a web-based open source GUI graphical user interface that controls and manages Asterisk PBX, an open source communication server, With over 1...

FreePBX 13.0.35 - Remote Command Execution

Exploit for php platform in category web applications Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : Ahmed sultan 0x4148 Email : email protected Summary : FreePBX is a web-based open source GUI graphical user interface that controls and manages Asterisk PBX, ...

Freepbx 13.0.35 SQL Injection

Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : i-Hmx Email : [email protected] Home : sec4ever.com Freepbx suffer from unauthenticated sql injection flaw due to insufficient sanitization of "display" parameter File : admin/libraries/DB.class.php public functi...

FreePBX 13.0.35 Remote Code Execution

Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : Ahmed sultan 0x4148 Email : [email protected] Summary : FreePBX is a web-based open source GUI graphical user interface that controls and manages Asterisk PBX, an open source communication server, With over 1...

FreePBX RCE Vulnerability (Aug 2016) - Active Check

A remote command execution RCE vulnerability that results in privileged escalation exists in FreePBX 13 and FreePBX 14 with Recordings SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreePBX 1314 - Remote Command Execution Privilege Escalation

FreePBX 1314 - Remote Command Execution Privilege Escalation !/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14...