What is CVE-2013-10043?

CVE-2013-10043 is a vulnerability in Astium Voip Pbx, classified under SQL Injection. Published 2025-07-31.

Is CVE-2013-10043 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Astium Voip Pbx

CVE-2013-10043

A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection. Once authenticated as an administrator…

Vulnerability class: SQL Injection

EPSS: 0.732 (98.8th percentile) — read the EPSS interpretation.

Affected products

Astium Voip Pbx — versions 0

Weakness classification (CWE)

Public proof-of-concept exploits

References

www.exploit-db.com/exploits/23831 (exploit)
raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/l… (exploit)
www.vulncheck.com/advisories/astium-voip-pbx-sqli-file-upload-rce (third-party-advisory)

Frequently asked questions

What is CVE-2013-10043?: CVE-2013-10043 is a vulnerability in Astium Voip Pbx, classified under SQL Injection. Published 2025-07-31.
Is CVE-2013-10043 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.