| Package | Affected versions | Patched versions |
|---|---|---|
| disa | < 13.0.6.2 | 13.0.6.2 |
FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free