VULNERABILITY INTELLIGENCE

CVE-2014-9001

CVSS score6.5 MEDIUM
EPSS probability2.80%
CISA KEVNot currently listed
Published2014-11-20
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references