FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/23575/info FreePBX is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content. Attacker-supplied HTML and script code may be executed in the conte...

FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities

FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/23575/info FreePBX is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content...

CVE-2006-7107

PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ampconfAMPWEBROOT parameter...

CVE-2006-7107

PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ampconfAMPWEBROOT parameter...

CVE-2006-7107

CVE-2006-7107 is a PHP remote file inclusion vulnerability in upgrade.php of Coalescent Systems freePBX 2.1.3. The issue allows remote attackers to execute arbitrary PHP code via a URL in the amp_conf[AMPWEBROOT] parameter, due to inadequate input handling. The linked sources (NVD and CVE listing...

FreePBX Shell命令执行漏洞

FreePBX是一款开放源代码的VOIP应用服务程序。 FreePBX不正确处理SHELL元字符，远程攻击者可以利用漏洞以进程权限执行任意命令。 由于对CALLERIDname或者number中的SHELL元字符缺少处理，可导致提交恶意字符串，以WEB权限执行。 OSSP Sheila 1.1.5 + Debian Linux 3.0 + HP Secure OS software for Linux 1.0 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Linux Mandrake 8.2 + MandrakeSoft Lin...

CVE-2006-6244

Coalescent Systems freePBX formerly Asterisk Management Portal before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in 1 CALLERIDname or 2 CALLERIDnumber...

CVE-2006-6244

Coalescent Systems freePBX formerly Asterisk Management Portal before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in 1 CALLERIDname or 2 CALLERIDnumber...

CVE-2006-6244

Coalescent Systems freePBX formerly Asterisk Management Portal before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in 1 CALLERIDname or 2 CALLERIDnumber...

CVE-2006-6244

Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 is vulnerable to arbitrary command execution via shell metacharacters in CALLERID(name) or CALLERID(number). Root cause: improper handling of shell metacharacters in these fields. The available sources document this ...

FreePBX < 2.2.1 VoIP Input Validation Vulnerabilities

Binary data 3831.prm...

FreePBX upgrade.php远程文件包含漏洞

FreePBX之前被称为Asterisk Management Portal，是IP电话工具Asterisk的标准化实现，可提供Web配置界面和其他工具。 FreePBX在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 FreePBX的upgrade.php文件没有正确验证对ampconf参数的输入，允许攻击者通过包含本地或外部任意资源导致执行任意PHP代码。漏洞相关的代码如下： requireonce$ampconf"AMPWEBROOT" . "/admin/functions.inc.php"; Coalescent Systems...

FreePBX VoIP Administrative Interface Detection

Binary data 3802.prm...

freePBX 2.1.3 (upgrade.php) Remote File Include Vulnerability

No description provided by source. Script: freePBX Version: v2.1.3 Script Download: http://puzzle.dl.sourceforge.net/sourceforge/amportal/freepbx-2.1.3.tgz Code: requireonce$ampconf"AMPWEBROOT" . "/admin/functions.inc.php"; Exploit: upgrades/2.1beta1/upgrade.php?ampconfAMPWEBROOT=evilscripts?...

FreePBX 2.1.3 - 'upgrade.php' Remote File Inclusion

Script: freePBX Version: v2.1.3 Script Download: http://puzzle.dl.sourceforge.net/sourceforge/amportal/freepbx-2.1.3.tgz Code: requireonce$ampconf"AMPWEBROOT" . "/admin/functions.inc.php"; Exploit: upgrades/2.1beta1/upgrade.php?ampconfAMPWEBROOT=evilscripts? Found: Cyber-Security Thanks: DJR,...

FreePBX 2.1.3 - upgrade.php Remote File Inclusion

FreePBX 2.1.3 - upgrade.php Remote File Inclusion Script: freePBX Version: v2.1.3 Script Download: http://puzzle.dl.sourceforge.net/sourceforge/amportal/freepbx-2.1.3.tgz Code: requireonce$ampconf"AMPWEBROOT" . "/admin/functions.inc.php"; Exploit:...

freePBX 2.1.3 (upgrade.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= freePBX 2.1.3 upgrade.php Remote File Include Vulnerability ============================================================= Script: freePBX Version: v2.1.3 Code:...

CVE-2023-26566

Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface ARI, which allows remote attackers to reconfigure Asterisk and make external and internal calls via HTTP and WebSocket requests sent to the API...