PT-2019-13941

Name of the Vulnerable Software and Affected Versions FusionPBX version 4.4.8 Description The issue allows an attacker to execute arbitrary system commands. This is achieved by submitting a malicious command to the service edit.php file, which inserts the command into the database. The stored...

PT-2019-12056

Name of the Vulnerable Software and Affected Versions Computrols CBAS version 18.0.0 Description The issue allows authenticated blind SQL injection via the id GET parameter in the "index.php?m=servers&a=start pulling&id=" endpoint. This can be exploited as demonstrated by injecting a substring in...