Skip to content
OpenAdvisories

Vendor

Astium

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.5
    CVE-2013-10043 Public exploit

    Astium VOIP PBX <= 2.1 SQL Injection File Upload RCE

    A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection. Once authenticated as an administrator, the attacker can up…