6 matches found
EUVD-2019-7441
Malware in sbrugna...
Command injection
app/callcenters/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated attackers with at least the permission callcenterqueueadd or callcenterqueueedit to execute any commands on...
CVE-2019-16964
app/callcenters/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated attackers with at least the permission callcenterqueueadd or callcenterqueueedit to execute any commands on...
CVE-2019-16964
app/callcenters/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated attackers with at least the permission callcenterqueueadd or callcenterqueueedit to execute any commands on...
PT-2019-14884
Name of the Vulnerable Software and Affected Versions FusionPBX versions up to 4.5.7 Description The issue arises from a lack of input validation in the Call Center Queue Module, specifically in the app/call centers/cmd.php file. This allows authenticated attackers with certain permissions to...
CVE-2019-16964: Improper Neutralization of Special Elements used in an OS Command
app/callcenters/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated attackers with at least the permission callcenterqueueadd or callcenterqueueedit to execute any commands on...