Exploit for Insertion of Sensitive Information into Log File in Hitachi Configuration Manager

CVE-2025-5781 CVE-2025-57819

githubexploit · 2026-08-16

Description

Unauthenticated SQL injection in FreePBX Endpoint module allows remote code execution via CVE-2025-57819.

Entry point

Parametermodule · query param

Path/admin/ajax.php

SQLi via FreePBX endpoint AJAX endpoint exposed parameters

Affected software

Hitachi Configuration Manager All versions

Hitachi Device Manager< 8.6.5-00

Hitachi Ops Center Api Configuration Manager< 11.0.5-00

Sangoma Freepbx< 15.0.66, 16.0.89, 17.0.3

All known vulnerabilities by product

CVSS Score

10.0

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

Working code

89%confidence this exploit runs

Based on 1 file(s) in the source

Exploit Details

Modified:2026-08-16 08:54

Last Seen:2026-08-16 09:05

Reporter:iamrajkumar1995

Last commit:2026-08-16

Tags

FreePBXEndpoint moduleSQL injectionremote code executionunauthenticated access

Other exploits for the same CVE

Exploit for Insertion of Sensitive Information into Log File in Hitachi Configuration_Manager

2026-08-11 jasonbernierGITHUB

Exploit for SQL Injection in Sangoma Freepbx

2026-08-01 TeteRENGITHUB

Exploit for SQL Injection in Sangoma Freepbx

2026-07-20 Neobee714GITHUB

security-research

2026-07-09 exploitnotesGITHUB

Exploit for SQL Injection in Sangoma Freepbx

2026-07-02 K3ysTr0K3RGITHUB

Exploit for SQL Injection in Sangoma Freepbx

2026-07-01 Its1ZeroGITHUB

Exploit for SQL Injection in Sangoma Freepbx

2026-07-01 Its1ZeroGITHUB

Exploit for SQL Injection in Sangoma Freepbx

2026-06-19 TYehanGITHUB

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=EC9A63D1-5820-58F3-949C-9F444CE56082
# cve-2025-5781_FreePBX
In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injection in the Endpoint module and, through a chain of database manipulation and scheduled task execution, achieve remote code execution.