Unrated severityNVD Advisory· Published Sep 6, 2012· Updated Jun 16, 2026

CVE-2012-4869

Description

The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Freepbx/Freepbx3 versions
cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*range: <=2.10
- cpe:2.3:a:sangoma:freepbx:2.9:*:*:*:*:*:*:*
- (no CPE)range: <=2.10

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/18649nvdExploit
www.securityfocus.com/bid/52630nvdExploit
secunia.com/advisories/48463nvdVendor Advisory
www.freepbx.org/trac/ticket/5711nvdVendor Advisory
packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.htmlnvd
seclists.org/fulldisclosure/2012/Mar/234nvd
www.exploit-db.com/exploits/18659nvd
exchange.xforce.ibmcloud.com/vulnerabilities/74174nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.056
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000