CVE-2019-16965

resources/cmd.php in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated…

published October 21, 2019

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

resources/cmd.php in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute any commands on the host as www-data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03002 · 87.3th percentile
Published
2019-10-21T18:45Z
EPSS history
Timeline
  • 21 OCT 18:45Z
    resources/cmd.php in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated…
    cvelistv5