466 matches found
FusionPBX 4.5.29 - Remote Code Execution (Authenticated) Exploit
Exploit Title: FusionPBX 4.5.29 - Remote Code Execution RCE Authenticated Exploit Author: Luska Vendor Homepage: https://www.fusionpbx.com/ Software Link: https://github.com/fusionpbx/fusionpbx Version: 4.5.30 Tested on: Debian CVE : CVE-2021-43405 !/usr/bin/python3 import requests from...
FusionPBX 4.5.29 Remote Code Execution
Exploit Title: FusionPBX 4.5.29 - Remote Code Execution RCE Authenticated Date: 11/08/2021 Exploit Author: Luska Vendor Homepage: https://www.fusionpbx.com/ Software Link: https://github.com/fusionpbx/fusionpbx Version: 4.5.30 Tested on: Debian CVE : CVE-2021-43405 !/usr/bin/python3 import reques...
FusionPBX 4.5.29 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: FusionPBX 4.5.29 - Remote Code Execution RCE Authenticated Date: 11/08/2021 Exploit Author: Luska Vendor Homepage: https://www.fusionpbx.com/ Software Link: https://github.com/fusionpbx/fusionpbx Version: 4.5.30 Tested on: Debian CVE : CVE-2021-43405 !/usr/bin/python3 import reques...
CVE-2021-43405
An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...
CVE-2021-43404
An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...
CVE-2021-43406
An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...
CVE-2021-43404
An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...
CVE-2021-43405
An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...
CVE-2021-43406
An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...
Session fixation
An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...
CVE-2021-43405
An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...
CVE-2021-43404
An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...
Design/Logic Flaw
An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...
Design/Logic Flaw
An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...
CVE-2021-43406
An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...
CVE-2021-43403
FusionPBX before 4.5.30 is affected by a vulnerability in log_viewer.php that lets an authenticated user specify an arbitrary filename for download (not restricted to freeswitch.log in the intended directory). Root cause: improper validation/restriction on downloadable file paths via the log view...
CVE-2021-43403
An issue was discovered in FusionPBX before 4.5.30. The logviewer.php Log View page allows an authenticated user to choose an arbitrary filename for download i.e., not necessarily freeswitch.log in the intended directory...
CVE-2021-43405
An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...
CVE-2021-43405
CVE-2021-43405 : FusionPBX before 4.5.30 is vulnerable due to fax_extension allowing non-numeric characters, which can enable authenticated remote code execution via fax_send.php (as shown in exploits for 4.5.29). Affected: FusionPBX client/server component handling fax extension input. Impact: p...