Skip to content
OpenAdvisories

Product · FreePBX

cdr

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    FreePBX cdr Cdr.class.php ajaxHandler sql injection

    A vulnerability was found in FreePBX cdr 14.0. It has been classified as critical. This affects the function ajaxHandler of the file ucp/Cdr.class.php. The manipulation of the argument limit/offset leads to sql injection. Upgrading to version 14.0.5.21 is abl…