CVE-2024-58294

EIP tracks 1 public exploit for CVE-2024-58294. PoCs published by Cold z3ro.

AI-analyzed exploit summary This PHP script exploits an authenticated RCE vulnerability in FreePBX versions 14-16 by injecting a bash reverse shell command via the 'scopes' parameter in the API module. The exploit uses cURL to send a malicious payload to the target, triggering a reverse shell connection to the attacker's specified IP and port.

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to establish remote shell access.