EDB-18659

functional

FreePBX 2.9.0/2.10.0 - 'callmenum' Remote Code Execution (Metasploit)

view exploit source exploit_dbverifiedtype webappsauthor Metasploitpublished 2012-03-24catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2012-4869UShigh7.5Exploit
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan