CVE-2025-62173 Authenticated SQL Injection in Endpoint Module Rest API

Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...

CVE-2025-62173

Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...

CVE-2025-62173

CVE-2025-62173 is an authenticated SQL injection affecting the FreePBX ERP Endpoint Module Rest API. The vulnerability arises from a lack of validation of externally supplied SQL statements in the Endpoint Module Rest API, enabling an authenticated attacker to execute arbitrary SQL commands and p...

CVE-2025-62173 Authenticated SQL Injection in Endpoint Module Rest API

Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...

PT-2025-48999

Name of the Vulnerable Software and Affected Versions Endpoint Module affected versions not specified Description An authenticated SQL Injection issue exists within the Rest API. Successful exploitation could allow an attacker to manipulate database queries. The Rest API is vulnerable to SQL...

Vulnerability fixed in FreePBX

FreePBX has fixed a vulnerability in versions 15, 16 and 17. The vulnerability allows attackers to gain unauthorized access and potentially execute remote code by exploiting a validation and remediation error in the processing of user-supplied input, such as in the "endpoint" module. FreePBX...

The vulnerability of the “endpoint” web interface module in the FreePBX IP telephony system allows a hacker to gain unauthorized access to the database and execute arbitrary code.

The vulnerability of the “endpoint” web interface module in the FreePBX IP-telephony system relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to the database and execute arbitrary code...

PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a null pointer dereference in the PCI:endpoint:epf-mhi module when DT is missing mmio...