medium4.3
CVE-2018-15892
FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.
Impact
FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freepbx | Disa | before 13.0.6.2 |