reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
incrediblepbx incredible pbx 11 2.0.6.5.0 |