Multiple vulnerabilities in FreePBX Security-Reporting modules including an authenticated command injection in the UCP interface and arbitrary PHP code execution via unsafe file inclusion in the Superfecta module.
| Vendor | Product | Versions |
|---|---|---|
| sangoma technologies | freepbx security-reporting modules | FreePBX Security-Reporting ucp (FreePBX 16) versions prior to 0.39, FreePBX Security-Reporting ucp (FreePBX 17) versions prior to 0.7, FreePBX Security-Reporting superfecta (FreePBX 16) versions prior to 16.0.40, FreePBX Security-Reporting superfecta (FreePBX 17) versions prior to 17.0.7 |
