Lucene search
PRIOn knowledge basePRION:CVE-2012-4869HistorySep 06, 2012 - 5:55 p.m.
Deserialization of untrusted data
2012-09-0617:55:00
PRIOn knowledge base
www.prio-n.com
2
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action.
References
packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html
seclists.org/fulldisclosure/2012/Mar/234
secunia.com/advisories/48463
www.freepbx.org/trac/ticket/5711
www.securityfocus.com/bid/52630
exchange.xforce.ibmcloud.com/vulnerabilities/74174
www.exploit-db.com/exploits/18649
www.exploit-db.com/exploits/18659
Related
thn
thn
cvelist
cvelist
CVE-2012-4869
2012-09-06 17:00:00
nvd
nvd
CVE-2012-4869
2012-09-06 17:55:02
checkpoint_advisories
checkpoint_advisories
FreePBX callmenum Remote Code Execution (CVE-2012-4869)
2016-11-27 00:00:00
attackerkb
attackerkb
CVE-2012-4869
2012-09-06 00:00:00
cve
cve
CVE-2012-4869
2012-09-06 17:55:02
openvas
openvas
FreePBX 2.9.0 - 2.10.0 Multiple Vulnerabilities - Active Check
2012-03-27 00:00:00