CVE-2014-1903

This exploit targets CVE-2014-1903 in FreePBX versions 2.9-2.11 and 12, allowing remote command execution via the 'handler' and 'function' parameters in the admin interface. It constructs a malicious HTTP GET request to trigger arbitrary function execution.

This Metasploit module exploits a vulnerability in FreePBX versions 2.9, 2.10, and 2.11 by injecting arbitrary PHP functions and commands via the 'function' and 'args' parameters in '/admin/config.php'. It sends a payload to achieve remote code execution.

This Metasploit module exploits a vulnerability in FreePBX versions 2.9, 2.10, and 2.11 by injecting arbitrary PHP functions and commands via the 'function' and 'args' parameters in the '/admin/config.php' endpoint.