Sangoma FreePBX 14.0.1.24
Approved changes feed: RSS · Atom
cpe:2.3:a:sangoma:freepbx:14.0.1.24:*:*:*:*:*:*:*
part: a version: 14.0.1.24 update: *
| Vendor | Sangoma (d67f1eae-5751-5e76-a443-3846a37ebaf1) |
|---|---|
| Product | Freepbx (e9bb594c-71db-5304-9653-3ac665826160) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:freepbx/freepbx/framework |
purl2cpe | 2026-06-01 10:12:26.973423 |
pkg:github/freepbx/framework |
purl2cpe | 2026-06-01 10:12:26.973424 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6393 |
vulnerable | 2026-06-03 14:39:00.228700 |
Details available
FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post-authentication SQL injection via the order parameter. NOTE: the vendor disputes this issue because it is intentional that a user can "directly modify SQL tables ... [or] run shell scripts ... once ... logged in to the administration interface; there is no need to try to find input validation errors.
Published: 2018-01-29T20:00:00.000Z
Updated: 2024-08-05T06:01:49.262Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.