CVE-2007-2350

no score yetEPSS 2.3%

admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2007-04-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

freepbx:freepbx

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053915.html
http://osvdb.org/35316
http://secunia.com/advisories/24935
http://securityreason.com/securityalert/2652
http://www.vupen.com/english/advisories/2007/1535

Check your stack JSON