mcorybillington/CVE-2025-64328_FreePBX-framework-Command-Injection

PoC

CVE-2025-64328 FreePBX Authenticated Command Injection in the framework module.

view exploit source poc_in_githubauthor mcorybillingtonpublished 2025-11-15catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-64328UShigh7.2OT criticalKEV
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the filestore module within the Administrat…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan