Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Api HIGH 8.8
CVE-2026-40520

FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation …

Fix: 17.0.8+
Fix from $1,950 2026-04-21
Manager MEDIUM 6.1
CVE-2019-16967

An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14.0.10.3. In the Manager module form (html\admin\modul…

Fix: 13.0.2.6 / 14.0.10.3+
Fix from $1,600 2019-10-21
Contactmanager MEDIUM 6.1
CVE-2019-16966

An issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x before 15.0.8.21 for FreePBX 14.0.10.3. In the Conta…

Fix: 13.0.45.3 / 14.0.5.12+
Fix from $1,600 2019-10-21
Freepbx HIGH 10.0
CVE-2014-7235EPSS 43%

htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.…

Fix: after 2.9.0.8
Fix from $1,950 2014-10-07
Freepbx HIGH 7.5
CVE-2014-1903EPSS 53%

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not…

No fix yet
Fix from $1,950 2014-02-18
Freepbx MEDIUM 6.8
CVE-2009-1802

Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote att…

Patch available
Fix from $1,600 2009-05-28
Freepbx MEDIUM 5.0
CVE-2009-1803

FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt depending on whe…

Patch available
Fix from $1,600 2009-05-28
Freepbx MEDIUM 6.5
CVE-2007-2350

admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell meta…

Fix: after 2.2.1
Fix from $1,600 2007-04-30
Freepbx MEDIUM 6.8
CVE-2007-2191

Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the (1) From, …

No fix yet
Fix from $1,600 2007-04-24