freepbx-endpoint-sqli-rce

CVE-2025-57819 — Inyección SQL en el Módulo Endpoint de FreePBX → Ejecución Remota de Código Resumen FreePBX es la interfaz web de código abierto para Asterisk PBX, ampliamente implementada en entornos de telefonía empresarial. El módulo Endpoint Manager expone un manejador AJAX en /admin/ajax.ph...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX SQLi no autenticada → RCE Exploit de un solo disparo para la inyección SQL no autenticada del Endpoint Manager de FreePBX CVE-2025-57819, encadenada a ejecución remota de código mediante la tabla cronjobs de FreePBX. Solo para pruebas de seguridad autorizadas / uso en CTF...

CVE-2025-57819-exploit

CVE-2025-57819 — SQLi de pre-autenticación a RCE en FreePBX Un exploit todo-en-uno para CVE-2025-57819 , una inyección SQL no autenticada en el módulo endpoint de FreePBX que conduce a la ejecución remota de código mediante la inyección de trabajos cron. CVSS : 9.8 Crítico —...

cve-2025-57819-exploit

CVE-2025-57819 Exploit Metadatos Gravedad: Crítica 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tipo: Inyección SQL no autenticada → Ejecución remota de código Software afectado: FreePBX módulo endpoint 15.0.66, 16.0.89 y 17.0.3 Probado en: FreePBX 16.0.40.7 en CentOS 7 con Apache 2.4...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — SQLi no autenticado a RCE como root Gravedad: Crítica Tipo: Inyección SQL no autenticada → Ejecución remota de código Software afectado: FreePBX módulo endpoint Probado en: FreePBX en CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Resumen Existe una vulnerabilidad de inyecció...

CVE-2025-57819

CVE-2025-57819 - FreePBX 16 Endpoint Manager inyección SQL no autenticada a RCE Inyección SQL apilada no autenticada en el módulo Endpoint Manager de FreePBX admin/ajax.php, parámetro brand, CVE-2025-57819, que afecta al framework FreePBX --vhost --root --cmd Cómo funciona 1. Confirmar la inyecci...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX En agosto de 2025, se reveló una vulnerabilidad crítica en el módulo Endpoint de FreePBX. CVE-2025–57819 permite que un atacante no autenticado explote una inyección SQL en el módulo Endpoint y, mediante una cadena de manipulación de la base de datos y ejecución de tareas...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX 16 Endpoint Manager unauthenticated S...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 Exploit Metadata - Severity: Critical...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one e...

📄 FreePBX Endpoint Authentication Bypass / SQL Injection

This proof of concept exploit demonstrates a chained attack scenario in FreePBX that combines an authentication bypass with a SQL injection vulnerability in the custom endpoint extension component. When specific configuration conditions are met, an attacker may interact with administrative...

VulnCheck KEV: CVE-2025-64328

Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection - checksshconnect function. An attacker can leverage this vulnerability to potentially obtain remote...

CVE-2025-67513

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. This is the apppassword parameter. Depending on local...

CVE-2025-67513

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. This is the apppassword parameter. Depending on local...

CVE-2025-67513 FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. This is the apppassword parameter. Depending on local...

CVE-2025-67513

CVE-2025-67513 affects FreePBX Endpoint Manager (module for managing telephony endpoints in FreePBX). Versions prior to 16.0.96 and 17.0.1 through 17.0.9 use a weak default 6‑digit app_password, which can be brute-forced. Depending on local configuration, this password could grant access to the e...

CVE-2025-67513 FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. This is the apppassword parameter. Depending on local...

EUVD-2025-202640

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. This is the apppassword parameter. Depending on local...

CVE-2025-66039

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target us...

FreePBX Endpoint Manager 安全漏洞

FreePBX Endpoint Manager is a centralized IP phone endpoint configuration module from the FreePBX open source. A security vulnerability exists in FreePBX Endpoint Manager versions prior to 16.0.96 and 17.0.1 through 17.0.9, which stems from a weak default password that can be brute-force broken...