Skip to content
OpenAdvisories

Vendor

FreePBX

44 known vulnerabilities.

Products

security-reporting 15 framework 5 endpoint 4 api 3 endpointman 2 tts 2 missedcall 1 music 1 ucp 1 FreePBX 1 contactmanager 1 restapps 1 cdr 1 core 1 arimanager 1 backup 1 voicemail 1 FreePBX Framework 1 filestore 1
All Critical High Medium Low Exploited only Public exploit

44 results · Feed

  • Medium 6.8
    CVE-2024-47071

    OSS Endpoint Manager allows unauthorized access to read system files

    OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.…

    FreePBX endpointman
  • Low 3.5
    CVE-2019-25090

    FreePBX arimanager Views cross site scripting

    A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Views Handler. The manipulation of the argument dataurl leads to cross site scripting. The atta…

    FreePBX arimanager
  • Low 3.5
    CVE-2021-4282

    FreePBX voicemail page.voicemail.php cross site scripting

    A vulnerability was found in FreePBX voicemail. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file page.voicemail.php. The manipulation leads to cross site scripting. The attack can be launched remotely…

    FreePBX voicemail
  • Medium 5.5
    CVE-2020-36630

    FreePBX cdr Cdr.class.php ajaxHandler sql injection

    A vulnerability was found in FreePBX cdr 14.0. It has been classified as critical. This affects the function ajaxHandler of the file ucp/Cdr.class.php. The manipulation of the argument limit/offset leads to sql injection. Upgrading to version 14.0.5.21 is abl…

    FreePBX cdr