PT-2012-5622 · Sangoma · Freepbx

Martin Tschirsich · Published 2012-09-06 · Updated 2019-12-10 · CVE-2012-4870

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FreePBX versions 2.9 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This can be achieved through various parameters and endpoints, including the context parameter to "panel/index amp.php" or "panel/dhtml/index.php", the clid or clidname parameters to "panel/flash/mypage.php", the PATH INFO to "admin/views/freepbx reload.php", or the login parameter to "recordings/index.php".

Recommendations For FreePBX versions 2.9 and earlier, update to a version later than 2.9 to resolve the issue. As a temporary workaround, consider restricting access to the specified endpoints and parameters, such as "panel/index amp.php", "panel/dhtml/index.php", "panel/flash/mypage.php", "admin/views/freepbx reload.php", and "recordings/index.php", until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-4870

Affected Products

Freepbx

References · 10

• 🔥 http://securityfocus.com/bid/52630 · Exploit
• 🔥 https://exploit-db.com/exploits/18649 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2012/Mar/234 · Exploit
• 🔥 http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html · Exploit
• 🔥 http://exploit-db.com/exploits/18649 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4870 · Security Note
• http://secunia.com/advisories/48475 · Vendor Advisory
• http://secunia.com/advisories/48463 · Vendor Advisory
• http://freepbx.org/trac/ticket/5711 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74173 · Note