EUVD-2006-7089

Malware in sbrugna...

CVE-2006-7107

PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ampconfAMPWEBROOT parameter...

CVE-2006-7107

CVE-2006-7107 is a PHP remote file inclusion vulnerability in upgrade.php of Coalescent Systems freePBX 2.1.3. The issue allows remote attackers to execute arbitrary PHP code via a URL in the amp_conf[AMPWEBROOT] parameter, due to inadequate input handling. The linked sources (NVD and CVE listing...

CVE-2006-7107: Undefined Security Weakness

PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ampconfAMPWEBROOT parameter...

CVE-2006-6244

Coalescent Systems freePBX formerly Asterisk Management Portal before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in 1 CALLERIDname or 2 CALLERIDnumber...

CVE-2006-6244

Coalescent Systems freePBX formerly Asterisk Management Portal before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in 1 CALLERIDname or 2 CALLERIDnumber...

CVE-2006-6244

Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 is vulnerable to arbitrary command execution via shell metacharacters in CALLERID(name) or CALLERID(number). Root cause: improper handling of shell metacharacters in these fields. The available sources document this ...