Description
FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- FusionPBX 4.4.8 - Remote Code Execution EDB-47358 · remote · Sep 6, 2019
GitHub 1 repository
-
mhaskar/CVE-2019-15029 ★ 8 · Aug 24, 2019
The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.