Skip to content
OpenAdvisories
Unscored CVE-2018-15892 EUVD-2018-7748GHSA-j9pq-6pwh-6xx6

FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.

Published Jun 20, 2019 · Updated Aug 5, 2024 · Assigned by mitre