PT-2012-5622 · Sangoma · Freepbx

Martin Tschirsich · Publicado 2012-09-06 · Atualizado 2019-12-10 · CVE-2012-4870

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FreePBX versions 2.9 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This can be achieved through various parameters and endpoints, including the context parameter to "panel/index amp.php" or "panel/dhtml/index.php", the clid or clidname parameters to "panel/flash/mypage.php", the PATH INFO to "admin/views/freepbx reload.php", or the login parameter to "recordings/index.php".

Recommendations For FreePBX versions 2.9 and earlier, update to a version later than 2.9 to resolve the issue. As a temporary workaround, consider restricting access to the specified endpoints and parameters, such as "panel/index amp.php", "panel/dhtml/index.php", "panel/flash/mypage.php", "admin/views/freepbx reload.php", and "recordings/index.php", until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-4870

Produtos afetados

Freepbx

Referências · 10

• 🔥 http://securityfocus.com/bid/52630 · Exploit
• 🔥 https://exploit-db.com/exploits/18649 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2012/Mar/234 · Exploit
• 🔥 http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html · Exploit
• 🔥 http://exploit-db.com/exploits/18649 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4870 · Nota de Segurança
• http://secunia.com/advisories/48475 · Aviso do Fabricante
• http://freepbx.org/trac/ticket/5711 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74173 · Nota
• http://secunia.com/advisories/48463 · Aviso do Fabricante