Tag: Security Research
-
FreePBX 17: From SQL Injection to Remote Code Execution
advisories / static analysisThere is no excerpt because this is a protected post.
-
Ten Years Later, A2Billing Still Had a Few Surprises
advisories / static analysisI returned to A2Billing a decade after writing about it and found pre-auth SQL injection and an authenticated code-execution chain. Here is how the research unfolded.