CVE-2025-57819— FreePBX 安全漏洞
一分钟漏洞结论
影响对象
FreePBX endpoint
利用判断
已确认在野利用，应立即处置
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
FreePBX（前称Asterisk Management Portal）是FreePBX项目的一套通过GUI（基于网页的图形化接口）配置Asterisk（IP电话系统）的工具。 FreePBX 15.0.66版本和17.0.3之前版本存在安全漏洞，该漏洞源于用户数据清理不足，可能导致未经验证访问管理员界面及远程代码执行。
公开利用映射 3
ExploitDB · 1
EDB-52681 [webapps]
Metasploit · 1
freepbx_unauth_sqli_to_rce.rb [exploit]
Nuclei · 1
CVE-2025-57819.yaml [template]
已观察到在野利用
github_trending · low
cisa_kev · confirmed
可能的 ATT&CK 技术 1 AI
T1190 · Exploit Public-Facing Application
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2025-57819 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
来源: CVE Program / CVE List V5
Vulnerability Description
FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
来源: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
来源: CVE Program / CVE List V5
Vulnerability Title
FreePBX 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
FreePBX（前称Asterisk Management Portal）是FreePBX项目的一套通过GUI（基于网页的图形化接口）配置Asterisk（IP电话系统）的工具。 FreePBX 15.0.66版本和17.0.3之前版本存在安全漏洞，该漏洞源于用户数据清理不足，可能导致未经验证访问管理员界面及远程代码执行。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2025-57819 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Detection for CVE-2025-57819 | https://github.com/rxerium/CVE-2025-57819 | POC详情 |
| 2 | This is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819 | https://github.com/Sucuri-Labs/CVE-2025-57819-ioc-check | POC详情 |
| 3 | FreePBX SQL Injection Exploit | https://github.com/blueisbeautiful/CVE-2025-57819 | POC详情 |
| 4 | A write up of CVE-2025-57819, a vulnerability affecting FreePBX 15, 16, and 17 | https://github.com/net-hex/CVE-2025-57819 | POC详情 |
| 5 | FreePBX CVE-2025-57819 lab (Docker) + Nuclei POC for unauth SQLi (time-based). | https://github.com/ImBIOS/lab-cve-2025-57819 | POC详情 |
| 6 | CVE-2025-57819 | https://github.com/B1ack4sh/Blackash-CVE-2025-57819 | POC详情 |
| 7 | FreePBX backdoor cleanup script used in 0-day exploitation of CVE-2025-57819 was detected. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/backdoor/freepbx-cleanup-backdoor.yaml | POC详情 |
| 8 | None | https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819 | POC详情 |
| 9 | FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57819.yaml | POC详情 |
| 10 | FreePBX SQL Injection Exploit | https://github.com/brokendreamsclub/CVE-2025-57819 | POC详情 |
| 11 | FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in endpoints. | https://github.com/MuhammadWaseem29/SQL-Injection-and-RCE_CVE-2025-57819 | POC详情 |
| 12 | Safe, read-only SQL Injection checker for FreePBX (CVE-2025-57819), using error/boolean/time-based techniques with per-parameter verdicts and JSON reporting. | https://github.com/xV4nd3Rx/CVE-2025-57819_FreePBX-PoC | POC详情 |
| 13 | This repository includes two PoC scripts for CVE-2025-57819 in FreePBX: one to create a new admin user (poc_admin.py), and another to extract credentials using sqlmap (poc_auto_get_username_pass.py). For educational and authorized use only. | https://github.com/orange0Mint/CVE-2025-57819_FreePBX | POC详情 |
| 14 | 🔍 Detect SQL injection risks in FreePBX's admin interface safely and efficiently, providing actionable insights and clean JSON reports for security teams. | https://github.com/JakovBis/CVE-2025-57819_FreePBX-PoC | POC详情 |
| 15 | CVE-2025-57819 | https://github.com/Ashwesker/Blackash-CVE-2025-57819 | POC详情 |
| 16 | Detects vulnerable FreePBX versions affected by CVE-2025-57819. | https://github.com/cybertechajju/cve-2025-57819 | POC详情 |
| 17 | CVE-2025-57819 | https://github.com/Ashwesker/Ashwesker-CVE-2025-57819 | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2025-57819 的情报信息
请登录查看更多情报信息。
CVE-2025-57819 厂商安全公告 (1)
CVE-2025-57819 其他参考 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2025-57819
暂无评论