medium6.5Public exploit code
CVE-2014-9001
reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN,…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Incredible PBX 2.0.6.5.0 - Remote Command Execution2014-10-27 · webapps · php
Impact
reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Incrediblepbx | Incredible Pbx 11 | Version 2.0.6.5.0 |