CVE-2012-4870

MEDIO 4.3CVE-2012-4870 · Published 06/09/2012 · updated 16/06/2026

In breve

CVE-2012-4870 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda freepbx (sangoma).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 80.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
freepbx sangoma	`≤ 2.9`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php.

References

packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html · Exploit
seclists.org/fulldisclosure/2012/Mar/234 · Exploit
secunia.com/advisories/48463 · Vendor Advisory
secunia.com/advisories/48475 · Vendor Advisory
exploit-db.com/exploits/18649 · Exploit
freepbx.org/trac/ticket/5711
securityfocus.com/bid/52630 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/74173

Altre vulnerabilità di freepbx

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

freepbx

sangoma

≤ 2.9

No fix yet

Description

Altre vulnerabilità di freepbx

Vedi tutto →