CVE-2019-16964

app/call_centers/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input…

published October 21, 2019

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

app/call_centers/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated attackers (with at least the permission call_center_queue_add or call_center_queue_edit) to execute any commands on the host as www-data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02003 · 80.6th percentile
Published
2019-10-21T18:15Z
EPSS history
Timeline
  • 21 OCT 18:15Z
    app/call_centers/cmd.php in the Call Center Queue Module in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input…
    cvelistv5