FusionPBX 4.4.3
Approved changes feed: RSS · Atom
cpe:2.3:a:fusionpbx:fusionpbx:4.4.3:*:*:*:*:*:*:*part: a version: 4.4.3 update: *
| Vendor | Fusionpbx (b1b7ab36-055f-595f-99e7-011b29a487ad) |
|---|---|
| Product | Fusionpbx (3ff3be6b-39db-5bf8-a45f-c23d53fbac0a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fusionpbx/fusionpbx |
purl2cpe | 2026-06-01 10:16:41.503732 |
pkg:sourceforge/fusionpbx.mirror |
purl2cpe | 2026-06-01 10:16:41.503734 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-11410 |
vulnerable | 2026-06-08 05:12:37.134551 |
Details available
app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host.
Published: 2019-06-17T18:03:51.000Z
Updated: 2024-08-04T22:55:40.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11409 |
vulnerable | 2026-06-08 05:12:37.134246 |
Details available
app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. This can further lead to remote code execution when combined with an XSS vulnerability also present in the FusionPBX Operator Panel module.
Published: 2019-06-17T18:02:23.000Z
Updated: 2024-08-04T22:55:40.800Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11408 |
vulnerable | 2026-06-08 05:12:37.133879 |
Details available
XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated attackers to inject arbitrary JavaScript characters by placing a phone call using a specially crafted caller ID number. This can further lead to remote code execution by chaining this vulnerability with a command injection vulnerability also present in FusionPBX.
Published: 2019-06-17T17:59:30.000Z
Updated: 2024-08-04T22:55:40.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11407 |
vulnerable | 2026-06-08 05:12:37.133460 |
Details available
app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 suffers from an information disclosure vulnerability due to excessive debug information, which allows authenticated administrative attackers to obtain credentials and other sensitive information.
Published: 2019-06-17T17:56:13.000Z
Updated: 2024-08-04T22:55:39.663Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.