FreePBX config.php Remote Code Execution

FreePBX config.php Remote Code Execution

This module exploits a vulnerability found in FreePBX version 2.9, 2.10, and 2.11. It's possible to inject arbitrary PHP functions and commands in the "/admin/config.php" parameters "function" and "args".

Module Name

exploit/unix/webapp/freepbx_config_exec

Authors

• i-Hmx
• 0x00string
• xistence <xistence [at] 0x90.nl>

References

• CVE-2014-1903
• OSVDB-103240
• EDB-32214
• URL: http://issues.freepbx.org/browse/FREEPBX-7123

Targets

• FreePBX

Platforms

• unix

Architectures

• cmd

Reliability

• Excellent

Development

• Source Code
• History

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

msf > use exploit/unix/webapp/freepbx_config_exec msf exploit(freepbx_config_exec) > show targets ...targets... msf exploit(freepbx_config_exec) > set TARGET <target-id> msf exploit(freepbx_config_exec) > show options ...show and set options... msf exploit(freepbx_config_exec) > exploit