CVE-2010-3490

Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows…

published September 28, 2010

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09388 · 95.4th percentile
Published
2010-09-28T17:00Z
EPSS history
Timeline
  • 28 SEP 17:00Z
    Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows…
    cvelistv5