Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?calc URI. This can also be exploited via CSRF. Alternatively, the default password of works for the freeswitch account can sometimes be used.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeSWITCH mod_xml_rpc模块命令注入漏洞
Vulnerability Description
FreeSWITCH是美国软件开发者Anthony Minessale所研发的一套免费、开源的通信软件。该软件可用于创建音、视频以及短消息类产品和应用。mod_xml_rpc module是其中的一个支持从Web控制触发API的模块。 FreeSWITCH 1.8.2及之前版本中的mod_xml_rpc模块存在安全漏洞。远程攻击者可通过访问TCP 8080端口借助api/system或txtapi/system（或api/bg_system 或txtapi/bg_system）查询字符串利用该漏洞执行任意
CVSS Information
N/A
Vulnerability Type
N/A