CVE-2014-1903
FreePBX <2.9.0.14, <2.10.1.15, <2.11.0.23, <12.0.1alpha22 - RCE
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2014-1903.
PoCs published by Metasploit, @0x00string, i-Hmx, 0x00string, including Metasploit module exploits/unix/webapp/freepbx_config_exec.
AI-analyzed exploit summary This Metasploit module exploits a vulnerability in FreePBX versions 2.9, 2.10, and 2.11 by injecting arbitrary PHP functions and commands via the 'function' and 'args' parameters in '/admin/config.php'. It sends a payload to achieve remote code execution.
Description
admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which allows remote attackers to execute arbitrary PHP code via the function and args parameters to admin/config.php.
Exploits (3)
This Metasploit module exploits a vulnerability in FreePBX versions 2.9, 2.10, and 2.11 by injecting arbitrary PHP functions and commands via the 'function' and 'args' parameters in '/admin/config.php'. It sends a payload to achieve remote code execution.
This exploit targets CVE-2014-1903 in FreePBX versions 2.9-2.11 and 12, allowing remote command execution via the 'handler' and 'function' parameters in the admin interface. It constructs a malicious HTTP GET request to trigger arbitrary function execution.
This Metasploit module exploits a vulnerability in FreePBX versions 2.9, 2.10, and 2.11 by injecting arbitrary PHP functions and commands via the 'function' and 'args' parameters in the '/admin/config.php' endpoint.