778 matches found
FreePBX 13.0.35 Remote Code Execution
Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : Ahmed sultan 0x4148 Email : [email protected] Summary : FreePBX is a web-based open source GUI graphical user interface that controls and manages Asterisk PBX, an open source communication server, With over 1...
FreePBX RCE Vulnerability (Aug 2016) - Active Check
A remote command execution RCE vulnerability that results in privileged escalation exists in FreePBX 13 and FreePBX 14 with Recordings SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreePBX 1314 - Remote Command Execution Privilege Escalation
FreePBX 1314 - Remote Command Execution Privilege Escalation !/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14...
FreePBX 13/14 - Remote Command Execution / Privilege Escalation
!/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14 System Recordings Module versions: 13.0.1beta1 - 13.0.26...
FreePBX 13 / 14 - Remote Command Execution / Privilege Escalation
Exploit for linux platform in category remote exploits !/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14 Syste...
Multiple Cross-Site Scripting (XSS) in FreePBX
Advisory ID: HTB23253 Product: FreePBX Vendor: Sangoma Technologies Vulnerable Versions: 12.0.43 and probably prior Tested Version: 12.0.43 Advisory Publication: March 18, 2015 without technical details Vendor Notification: March 18, 2015 Vendor Patch: March 27, 2015 Public Disclosure: April 22,...
FreePBX 12.0.43 Cross Site Scripting
Advisory ID: HTB23253 Product: FreePBX Vendor: Sangoma Technologies Vulnerable Versions: 12.0.43 and probably prior Tested Version: 12.0.43 Advisory Publication: March 18, 2015 without technical details Vendor Notification: March 18, 2015 Vendor Patch: March 27, 2015 Public Disclosure: April 22,...
FreePBX suffers from multiple cross-site scripting vulnerabilities (CNVD-2015-02675)
FreePBX is an open source, web-based PBX solution. FreePBX has multiple cross-site scripting vulnerabilities. Due to multiple HTTP POST parameters passed to the "/admin/config.php" script when "type" is set to "setup", "display" to "digiumaddons", "page" to "add-license-form", and "addon" to "ffa...
Multiple Cross-Site Scripting (XSS) in FreePBX
High-Tech Bridge Security Research Lab discovered multiple XSS vulnerabilities in FreePBX, which can be exploited to perform Cross-Site Scripting XSS attacks against web application administrators. This vulnerability can be used to steal administrator’s cookies, perform phishing and...
FreePBX < 2.9.0.9, 2.10.x < 2.11.1.5 RCE Vulnerability - Active Check
FreePBX is prone to a remote command execution RCE vulnerability because the application fails to sufficiently sanitize input data. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreePBX /recordings/index.php 'ari_auth' Cookie Authentication Bypass
The version of FreePBX hosted on the remote web server is affected by an authentication bypass vulnerability in the FreePBX ARI Framework module / Asterisk Recording Interface ARI. A remote, unauthenticated attacker can exploit this issue to gain full administrator access to the FreePBX server by...
SIP Display Field CrossSite Scripting - Ver2 (CVE-2007-2191)
A cross-site scripting vulnerability has been reported in Freepbx. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
FreePBX Framework Asterisk Recording Interface unserialize Code Execution (CVE-2014-7235)
A code execution vulnerability exists in FreePBX. The vulnerability is due to an input validation issue in the index.php file of the recordings directory...
FreePBX (All Versions) RCE
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We would like to announce that a significant security vulnerability has been discovered in all current versions of FreePBX. A CVE has been requested from Mitre, but has yet to be provided. Further details as they come to hand will be available from...
CVE-2014-7235
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
Code injection
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
CVE-2014-7235
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
CVE-2014-7235
CVE-2014-7235 affects the ARI Framework/FreePBX Asterisk Recording Interface login.php. An unauthenticated remote attacker can exploit via the ari_auth cookie to trigger unserialize-based code execution, with exploitation observed publicly and in the wild around 2014. Affected versions include Fr...
Elastix PBX 2.x.x Remote Command Execution 0day Exploit
This vulnerability in Elastix 2.x.x for remote command execution to escalate your privileges to root on most systems in Elastix. A remote command execution vulnerability exists in Elastix PBX all version 2.x.x and versions of FreePBX 2.5, 2.6, 2.7, 2.8, 2.9, 2.10. This is private exploit. You can...
