Lucene search
K

16 matches found

Cvelist
Cvelist
added 2025/07/31 2:53 p.m.6 views

CVE-2013-10043 Astium VOIP PBX <= 2.1 SQL Injection File Upload RCE

A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection. Once authenticated as an administrator, the attacker can upload arbitrary PHP code through the...

9.5CVSS0.73199EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/07/31 2:53 p.m.3 views

CVE-2013-10043 Astium VOIP PBX <= 2.1 SQL Injection File Upload RCE

A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection. Once authenticated as an administrator, the attacker can upload arbitrary PHP code through the...

9.5CVSS9AI score0.73199EPSS
Exploits0References3
CVE
CVE
added 2025/07/31 2:53 p.m.15 views

CVE-2013-10043

The CVE-2013-10043 issue affects Astium VoIP PBX astium-confweb-2.1-25399 and earlier. It describes improper input validation in logon.php allowing SQL injection to bypass authentication. An authenticated attacker can then upload arbitrary PHP code through the import.php field (importcompany), re...

9.5CVSS8.3AI score0.73199EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.1 views

Astium VoIP PBX 安全漏洞

Astium VoIP PBX is an IP network-based telephone switching system from Astium. A security vulnerability exists in Astium VoIP PBX astium-confweb-2.1-25399 and prior versions, which stems from improper validation of input to the logon.php script, and could lead to SQL injection and remote code...

9.5CVSS8.5AI score0.73199EPSS
Exploits0References3
Circl
Circl
added 2018/05/29 3:50 p.m.1 views

CVE-2013-10043

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/astiumsqliupload.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

9.5CVSS5.1AI score0.73199EPSS
Exploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

Astium VoIP PBX <= 2.1 build 25399 - Multiple Vulns Remote Root Exploit

No description provided by source. !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX = v2.1 build 25399 Multiple Vulns Remote Root Exploit Date : 01-02-2012 Author :...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.24 views

Astium VoIP PBX <= 2.1 build 25399 - Remote Crash PoC

No description provided by source. !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX = v2.1 build 25399 Remote Crash PoC Date : 01-02-2012 Author : xistence...

7.1AI score
Exploits0
0day.today
0day.today
added 2013/09/27 12:0 a.m.20 views

Astium Remote Code Execution Vulnerability

This Metasploit module exploits vulnerabilities found in Astium astium-confweb-2.1-25399 RPM and lower. A SQL Injection vulnerability is used to achieve authentication bypass and gain admin access. From an admin session arbitrary PHP code upload is possible. It is used to add the final PHP payloa...

9.2AI score
Exploits0
Packet Storm
Packet Storm
added 2013/09/26 12:0 a.m.19 views

Astium Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Astium Remote Cod...

Exploits0
Metasploit
Metasploit
added 2013/09/17 5:32 a.m.11 views

Astium Remote Code Execution

This module exploits vulnerabilities found in Astium astium-confweb-2.1-25399 RPM and lower. A SQL Injection vulnerability is used to achieve authentication bypass and gain admin access. From an admin session arbitrary PHP code upload is possible. It is used to add the final PHP payload to...

0.8AI score
Exploits0
exploitpack
exploitpack
added 2013/01/02 12:0 a.m.16 views

Astium VoIP PBX 2.1 build 25399 - Remote Crash (PoC)

Astium VoIP PBX 2.1 build 25399 - Remote Crash PoC !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

7.5AI score
Exploits0
0day.today
0day.today
added 2013/01/02 12:0 a.m.19 views

Astium VoIP PBX <= v2.1 build 25399 Multiple Vulns Remote Root Exploit

Exploit for php platform in category web applications !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2013/01/02 12:0 a.m.22 views

Astium VoIP PBX 2.1 build 25399 - Multiple Vulnerabilities/Remote Command Execution

!/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2013/01/02 12:0 a.m.19 views

Astium VoIP PBX 2.1 Remote Root

!/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2013/01/02 12:0 a.m.32 views

Astium VoIP PBX 2.1 build 25399 - Remote Crash (PoC)

!/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2013/01/02 12:0 a.m.56 views

Astium VoIP PBX <= 2.1 SQLi Vulnerability - Active Check

Astium VoIP PBX is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

9.5CVSS7.5AI score0.73199EPSS
Exploits0References1
Rows per page
Query Builder