CVE-2021-30461: Improper Control of Generation of Code

A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...

PT-2021-3637

Name of the Vulnerable Software and Affected Versions VoIPmonitor versions prior to 24.61 Description A remote code execution issue was discovered in the web UI of VoIPmonitor. The issue is related to incorrect management of code generation in the config/configuration.php component. When the...