auxiliary/gather/freepbx_custom_extension_injection

functional

FreePBX Custom Extension SQL Injection

view exploit source metasploittype auxiliarypublished 2025-12-11catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-66039US	critical9.8	3.39% (89th)	Exploit	2025-12-09
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "w…
CVE-2025-61675US	—	38.8% (99th)	Exploit	2025-10-14
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, t…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.