Abdul Mhanni

Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation

Unauthenticated Arbitrary File Upload (patch_contents.php)

Unauthenticated Arbitrary File Upload (upgrade_contents.php)

Unauthenticated Arbitrary File Deletion (upgrade_contents.php)

Unauthenticated OS Command Injection (start_upgrade.php)

Infinite Loop Denial of Service via Failed File Deletion

Unauthenticated Arbitrary File Read via Null Byte Injection

Unquoted Service path in UPSilon2000V6.0 SYSTEM privilege service

Unauthenticated Arbitrary File Deletion (patch_contents.php)

Stored Cross-Site Scripting via XML Injection