735 matches found
FreePBX 13/14 - Remote Command Execution / Privilege Escalation
!/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14 System Recordings Module versions: 13.0.1beta1 - 13.0.26...
FreePBX 13 / 14 - Remote Command Execution / Privilege Escalation
Exploit for linux platform in category remote exploits !/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14 Syste...
Multiple Cross-Site Scripting (XSS) in FreePBX
Advisory ID: HTB23253 Product: FreePBX Vendor: Sangoma Technologies Vulnerable Versions: 12.0.43 and probably prior Tested Version: 12.0.43 Advisory Publication: March 18, 2015 without technical details Vendor Notification: March 18, 2015 Vendor Patch: March 27, 2015 Public Disclosure: April 22,...
FreePBX 12.0.43 Cross Site Scripting
Advisory ID: HTB23253 Product: FreePBX Vendor: Sangoma Technologies Vulnerable Versions: 12.0.43 and probably prior Tested Version: 12.0.43 Advisory Publication: March 18, 2015 without technical details Vendor Notification: March 18, 2015 Vendor Patch: March 27, 2015 Public Disclosure: April 22,...
FreePBX suffers from multiple cross-site scripting vulnerabilities (CNVD-2015-02675)
FreePBX is an open source, web-based PBX solution. FreePBX has multiple cross-site scripting vulnerabilities. Due to multiple HTTP POST parameters passed to the "/admin/config.php" script when "type" is set to "setup", "display" to "digiumaddons", "page" to "add-license-form", and "addon" to "ffa...
Multiple Cross-Site Scripting (XSS) in FreePBX
High-Tech Bridge Security Research Lab discovered multiple XSS vulnerabilities in FreePBX, which can be exploited to perform Cross-Site Scripting XSS attacks against web application administrators. This vulnerability can be used to steal administrator’s cookies, perform phishing and...
FreePBX < 2.9.0.9, 2.10.x < 2.11.1.5 RCE Vulnerability - Active Check
FreePBX is prone to a remote command execution RCE vulnerability because the application fails to sufficiently sanitize input data. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreePBX /recordings/index.php 'ari_auth' Cookie Authentication Bypass
The version of FreePBX hosted on the remote web server is affected by an authentication bypass vulnerability in the FreePBX ARI Framework module / Asterisk Recording Interface ARI. A remote, unauthenticated attacker can exploit this issue to gain full administrator access to the FreePBX server by...
SIP Display Field CrossSite Scripting - Ver2 (CVE-2007-2191)
A cross-site scripting vulnerability has been reported in Freepbx. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
FreePBX Framework Asterisk Recording Interface unserialize Code Execution (CVE-2014-7235)
A code execution vulnerability exists in FreePBX. The vulnerability is due to an input validation issue in the index.php file of the recordings directory...
FreePBX (All Versions) RCE
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We would like to announce that a significant security vulnerability has been discovered in all current versions of FreePBX. A CVE has been requested from Mitre, but has yet to be provided. Further details as they come to hand will be available from...
CVE-2014-7235
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
Code injection
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
CVE-2014-7235
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
CVE-2014-7235
CVE-2014-7235 affects the ARI Framework/FreePBX Asterisk Recording Interface login.php. An unauthenticated remote attacker can exploit via the ari_auth cookie to trigger unserialize-based code execution, with exploitation observed publicly and in the wild around 2014. Affected versions include Fr...
Elastix PBX 2.x.x Remote Command Execution 0day Exploit
This vulnerability in Elastix 2.x.x for remote command execution to escalate your privileges to root on most systems in Elastix. A remote command execution vulnerability exists in Elastix PBX all version 2.x.x and versions of FreePBX 2.5, 2.6, 2.7, 2.8, 2.9, 2.10. This is private exploit. You can...
FreePBX 2.10.0 callmenum 远程代码执行漏洞
No description provided by source...
FreePBX 2.5.2 Zap Channel Addition Description Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/37482/info FreePBX is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content...
FreePBX 2.5.x - Information Disclosure
FreePBX 2.5.x 'admin/config.php'密码信息泄漏漏洞 1. 漏洞信息 FreePBX是一款用来控制Asterisk的图形化接口。 能访问管理段的用户可以通过查看HTML源代码来获得其他管理员的密码信息。 2.漏洞使用方法 访问管理段用户的url http://localhost/admin/config.php?display=ampusers&userdisplay=admin 查看网页源码 PasswordCreate a password for this new user: 可以看到了密码 3.厂商解决方案 freePBX...
FreePBX 2.10.0 / 2.9.0 callmenum Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...