← All advisories

Medium severity4.3NVD Advisory· Published Jun 20, 2019· Updated Jun 17, 2026

CVE-2018-15892

CVE-2018-15892

Description

FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Freepbx/Disa
cpe:2.3:a:freepbx:disa:*:*:*:*:*:*:*:*
Range: <13.0.6.2
FreePBX/FreePBXdescription
Freepbx/DISA modulellm-create
Range: 13, 14
Freepbx/Freepbxllm-fuzzy
Range: 13, 14

Patches

Vulnerability mechanics

References

2

wiki.freepbx.org/display/FOP/2018-09-11+DISA+SQL+InjectionnvdVendor Advisory
www.freepbx.orgnvdProduct

News mentions

0

No linked articles in our index yet.