Cold Z3Ro

**Nome do Software Vulnerável e Versões Afetadas** FreePBX versão 16 **Descrição** A versão 16 do FreePBX contém uma vulnerabilidade de execução remota de código autenticada no módulo de API. Um invasor com credenciais de sessão válidas pode executar comandos arbitrários. A vulnerabilidade é explorável através do endpoint de API 'generatedocs' mediante o envio de solicitações POST manipuladas que injetam comandos bash, potencialmente resultando em acesso a shell remoto. O endpoint `generatedocs` aceita solicitações POST com payloads maliciosos. O parâmetro vulnerável não é especificado explicitamente, mas o ataque envolve injeção de comandos bash. **Recomendações** Aplique quaisquer atualizações ou patches disponíveis para a versão 16 do FreePBX. Restrinja o acesso ao endpoint de API 'generatedocs'. Como medida temporária, considere desabilitar o módulo de API até que um patch esteja disponível.

**Name of the Vulnerable Software and Affected Versions** osDate versions 2.0.8 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `php121dir` parameter. This can be achieved by manipulating the `php121dir` parameter in the vulnerable PHP file. **Recommendations** For osDate versions 2.0.8 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Picturesolution versions 2.1 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the `path` parameter in the install/config.php file. Recommendations: For Picturesolution versions 2.1 and earlier, update to a version later than 2.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** vBulletin Google Yahoo Site Map (vBGSiteMap) version 2.41 for vBulletin **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `base` parameter to API endpoints such as "vbgsitemap/vbgsitemap-config.php" or "vbgsitemap/vbgsitemap-vbseo.php". **Recommendations** For vBulletin Google Yahoo Site Map (vBGSiteMap) version 2.41, consider restricting access to the `vbgsitemap-config.php` and `vbgsitemap-vbseo.php` files until a patch is available. Avoid using the `base` parameter in the affected API endpoints to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Taskhopper version 1.1 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `mosConfig absolute path` parameter to various PHP files, including "contact type.php", "itemstatus type.php", "projectstatus type.php", "request type.php", "responses type.php", "timelog type.php", and "urgency type.php" in the "inc/" directory. **Recommendations** For Taskhopper version 1.1, consider restricting access to the `mosConfig absolute path` parameter to prevent remote file inclusion attacks. As a temporary workaround, restrict access to the affected PHP files in the "inc/" directory until a patch is available. Avoid using the `mosConfig absolute path` parameter in the affected API endpoints until the issue is resolved.