PT-2018-17528 · Sangoma · Freepbx

Code16 · Published 2018-01-29 · Updated 2024-08-05 · CVE-2018-6393

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreePBX versions 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2)

Description The issue allows post-authentication SQL injection via the order parameter. It is noted that the vendor disputes this issue, stating it is intentional for users to be able to directly modify SQL tables or run shell scripts once logged in to the administration interface.

Recommendations For FreePBX version 10.13.66-32bit, consider restricting access to the administration interface to minimize the risk of exploitation. For FreePBX version 14.0.1.24 (SNG7-PBX-64bit-1712-2), consider restricting access to the administration interface to minimize the risk of exploitation. As a temporary workaround, consider disabling the ability to directly modify SQL tables or run shell scripts for non-privileged users until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-6393

Affected Products

Freepbx

References · 5

• 🔥 https://github.com/c610/tmp/blob/master/sqlipoc-freepbx-14.0.1.24-req.txt · Exploit
• 🔥 http://code610.blogspot.com/2018/01/post-auth-sql-injection-in-freepbx.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-6393 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6393 · Security Note
• http://securityfocus.com/bid/102854 · Note