EUVD-2018-7747

Malware in sbrugna...

CVE-2018-15891

An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name...

CVE-2018-15891

An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name...

PT-2019-9197

Name of the Vulnerable Software and Affected Versions FreePBX core versions prior to 3.0.122.43 FreePBX core versions prior to 14.0.18.34 FreePBX core versions prior to 5.0.1beta4 Description An issue was discovered that allows an attacker to store JavaScript commands in a module name by crafting...

CVE-2018-15891: Improper Neutralization of Input During Web Page Generation

An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name...

ASA-2007-016: Remote crash vulnerability in Skinny channel driver

Asterisk Project Security Advisory - ASA-2007-016 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote crash vulnerability in Skinny channel | | | driver |...