Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2012-4870
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-06 Sep, 2012 | 17:55
Updated At-29 Apr, 2026 | 01:13

Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 4.3
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
Sangoma Technologies Corp.
sangoma
>>freepbx>>Versions up to 2.9(inclusive)
cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
CWE ID: CWE-79
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.htmlcve@mitre.org
Exploit
http://seclists.org/fulldisclosure/2012/Mar/234cve@mitre.org
Exploit
http://secunia.com/advisories/48463cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/48475cve@mitre.org
Vendor Advisory
http://www.exploit-db.com/exploits/18649cve@mitre.org
Exploit
http://www.freepbx.org/trac/ticket/5711cve@mitre.org
N/A
http://www.securityfocus.com/bid/52630cve@mitre.org
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/74173cve@mitre.org
N/A
http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.htmlaf854a3a-2127-422b-91ae-364da2661108
Exploit
http://seclists.org/fulldisclosure/2012/Mar/234af854a3a-2127-422b-91ae-364da2661108
Exploit
http://secunia.com/advisories/48463af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/48475af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.exploit-db.com/exploits/18649af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.freepbx.org/trac/ticket/5711af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/52630af854a3a-2127-422b-91ae-364da2661108
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/74173af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: http://seclists.org/fulldisclosure/2012/Mar/234
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: http://secunia.com/advisories/48463
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/48475
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://www.exploit-db.com/exploits/18649
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: http://www.freepbx.org/trac/ticket/5711
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/52630
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/74173
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: http://seclists.org/fulldisclosure/2012/Mar/234
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: http://secunia.com/advisories/48463
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/48475
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.exploit-db.com/exploits/18649
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: http://www.freepbx.org/trac/ticket/5711
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/52630
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/74173
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found