Security Advisory

CVE-2019-11409

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-17 18:02:23

Last updated 2024-08-04 22:55:40

Assigner mitre

State PUBLISHED

Description

app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. This can further lead to remote code execution when combined with an XSS vulnerability also present in the FusionPBX Operator Panel module.

← Browse all CVEs View on cve.org ↗