CVE-2013-10043

The CVE-2013-10043 issue affects Astium VoIP PBX astium-confweb-2.1-25399 and earlier. It describes improper input validation in logon.php allowing SQL injection to bypass authentication. An authenticated attacker can then upload arbitrary PHP code through the import.php field (importcompany), re...