Issabel-PBX-4.0.0-RCE-Authenticated

Issabel PBX 4.0.0 Remote Code Execution Authenticated - CVE-2024-0986 Description/Summary Issabel PBX 4.0.0 allows a logged in user to use asteriskcli console to create files with xmldoc and dump commands. This allows to execute remote commands based on the name of the uploaded files abusing...

CVE-2024-0986

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

Exploit for OS Command Injection in Issabel Pbx

Issabel PBX 4.0.0 Remote Code Execution Authenticated - CVE-...

CVE-2024-0986

creationtimestamp| type| source ---|---|--- 2024-01-29 01:26:09+00:00| seen| https://t.me/ctinow/175035 2024-02-21 08:36:51+00:00| seen| https://t.me/ctinow/189341 2024-04-16 03:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7067 2024-04-16 06:27:50+00:00|...

CVE-2024-0986

CVE-2024-0986 affects Issabel PBX 4.0.0 through the Asterisk-Cli component. The vulnerability arises from improper handling of the Command argument in /index.php?menu=asterisk_cli, enabling OS command injection. Multiple connected sources describe this as an authenticated remote command execution...

CVE-2024-0986 Issabel PBX Asterisk-Cli os command injection

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...