CVE-2019-11410: OS Command Injection
app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11410?
CVE-2019-11410 has a medium severity rating due to its potential for command injection by authenticated users.
How do I fix CVE-2019-11410?
To fix CVE-2019-11410, update FusionPBX to version 4.4.4 or later, which contains the necessary security patches.
Who is affected by CVE-2019-11410?
CVE-2019-11410 affects FusionPBX version 4.4.3 installations, particularly those with administrative access.
What are the potential impacts of CVE-2019-11410?
The potential impacts of CVE-2019-11410 include unauthorized remote command execution by attackers with administrative credentials.
Is CVE-2019-11410 easy to exploit?
CVE-2019-11410 can be exploited by authenticated administrative users, making it a significant risk if proper input validation is not applied.