FreePBX

Records56All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

FreePBX records in CISA KEV

Products in the NVD configurations · select one to filter the records

1 record in Disa · all components

TI-2018-11331 CVE-2018-15892 · GHSA-j9pq-6pwh-6xx6

LOW 21

FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.

CVSS 3.0MEDIUM 4.3 Network High privileges User interaction EPSS 0.00523 Published 2019-06-20 No fix listed CWE-89