Vulnerability in Freepbx

CVE-2007-2350

admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter.

EPSS: 0.023 (81.3th percentile) — read the EPSS interpretation.

Affected products

Freepbx
N/a — versions n/a

References

cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)