FreePBX config.php Remote Code Execution Vulnerability

This Metasploit module exploits a vulnerability found in FreePBX version 2.9, 2.10, and 2.11. It's possible to inject arbitrary PHP functions and commands in the "/admin/config.php" parameters "function" and "args". This module requires Metasploit: http//metasploit.com/download Current source:...

FreePBX config.php Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "FreePBX config.php Remote Code Execution", 'Description' = %q This module exploits a vulnerability found in FreePBX version 2.9, 2.10...

FreePBX config.php Remote Code Execution

This module exploits a vulnerability found in FreePBX version 2.9, 2.10, and 2.11. It's possible to inject arbitrary PHP functions and commands in the "/admin/config.php" parameters "function" and "args". Module Options msf use exploit/unix/webapp/freepbx/configexec msf undefinedconfigexec show...

FreePBX 2.9 - 12 RCE Vulnerability - Active Check

FreePBX is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:freepbx:freepbx"; ...

FreePBX 2.11.0 - Remote Command Execution

FreePBX 2.11.0 - Remote Command Execution !/usr/bin/perl use strict; use warnings; use IO::Socket::INET; Exploit Title: FreePBX 2.9,2.10,2.11,12 Remote Command Execution Google Dork: n/a Date: 2/25/14 Exploit Author: @0x00string Vendor Homepage: http://www.freepbx.org/ Software Link:...

FreePBX 2.11.0 - Remote Command Execution

!/usr/bin/perl use strict; use warnings; use IO::Socket::INET; Exploit Title: FreePBX 2.9,2.10,2.11,12 Remote Command Execution Google Dork: n/a Date: 2/25/14 Exploit Author: @0x00string Vendor Homepage: http://www.freepbx.org/ Software Link: http://mirror.freepbx.org/freepbx-2.11.0.tar.gz Versio...

FreePBX 'usersnum'参数远程命令执行漏洞

BUGTRAQ ID: 65756 FreePBX是开源Web PBX解决方案。 FreePBX 2.x版本和其他版本在实现上存在远程命令执行漏洞，攻击者可利用此漏洞在受影响应用上下文中执行任意命令。 0 FreePBX FreePBX 2.x 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://freepbx.org/trac Vulnerable function "recordingaddpage" @ admin/modules/recordings/page.recordings.php function...

FreePBX 2.x Remote Command Execution

App : Freepbx 2.x Download : schmoozecom.net Auther : i-Hmx Mail : [email protected] Home : security arrays inc. , sec4ever.com , exploit4arab.net And again , while the distro is widely user , Schmoozecom staff not giving it enough attention , all they provided for the distro is adding the...

CVE-2014-1903

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which allows remote attackers to execute arbitrary PHP code via the function and args...

Code injection

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which allows remote attackers to execute arbitrary PHP code via the function and args...

CVE-2014-1903

Summary: FreePBX versions 2.9 (before 2.9.0.14), 2.10 (before 2.10.1.15), 2.11 (before 2.11.0.23), and 12 (before 12.0.1alpha22) are vulnerable because admin/libraries/view.functions.php does not restrict the API handler’s function set, enabling remote attackers to execute arbitrary PHP code via ...

CVE-2014-1903

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which allows remote attackers to execute arbitrary PHP code via the function and args...

Freepbx 2.x Code Execution Exploit

Exploit for php platform in category web applications App : Freepbx 2.x download : schmoozecom.com Author : i-Hmx mail : email protected Home : sec4ever.com , secarrays ltd Freepbx is famous asterisk based distro used world wide , it suffer from many vulns actually simple one is included here jus...

FreePBX Backup Module page.backup.php 'dir' Parameter RCE

The version of FreePBX hosted on the remote web server is affected by a remote command injection vulnerability due to a weakness in the 'strpos' function when sanitizing user-supplied input to the 'dir' parameter in 'page.backup.php'. A remote, unauthenticated attacker can exploit this issue to...

FreePBX 2.9 Backup Module Remote Command Execution Vulnerability

As mentioned on subject i would like to submit the vulnerability "FreePBX 2.9 Backup Module Remote Command Execution" Title: FreePBX 2.9 Backup Module Remote Command Execution Vulnerability Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Vendor: http://www.freepbx.org Software Link:...

FreePBX 2.9 Remote Command Execution

Title: FreePBX 2.9 Backup Module Remote Command Execution Vulnerability Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Vendor: http://www.freepbx.org Software Link: http://mirror.freepbx.org/freepbx-2.9.0.tar.gz Version: 2.9 and prior versions should be affected too Tested on: Linux...

CVE-2012-4870

Multiple cross-site scripting XSS vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 context parameter to panel/indexamp.php or 2 panel/dhtml/index.php; 3 clid or 4 clidname parameters to panel/flash/mypage.php; 5 PATHINFO to...

CVE-2012-4869

The callmestartcall function in recordings/misc/callmepage.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 context parameter to panel/indexamp.php or 2 panel/dhtml/index.php; 3 clid or 4 clidname parameters to panel/flash/mypage.php; 5 PATHINFO to...

Deserialization of untrusted data

The callmestartcall function in recordings/misc/callmepage.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action...