Back to feed
EUVD-2012-4794 · Published Sep 6, 2012
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action.
Technologies
Sangoma Freepbx
Weaknesses
CWE-94
CVSS scores
- v2.07.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Stealth
References
Potentially impacted assets
See if this affects your attack surface
