Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Cytellite recent detection targeting CVE-2012-4870 — Church of Cyberology Visit -- https://cti.loginsoft.com/ip/192.42.116.212 #Loginsoft #Cytellite #Cybersecurity #CVE20124870 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/KcsBqu9FYK
Post summary
The tweet reports a recent detection of activity targeting CVE-2012-4870 but offers no further technical details, exploit information, or patch guidance.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sangoma | freepbx | - | - | - |