CVE-2018-15892
FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.
Published: 2019-06-20 · CVSS: Unscored
FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7