[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCCG5_rxFSD07WDn6ZptIKWZwk59fu-wgoYGsl6Xyavg":3,"g5a-risk:CVE-2014-1903":175},{"success":4,"data":5,"meta":173},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":32,"affectedProducts":33,"affectedProductsCount":48,"references":49,"referencesCount":117,"weaknesses":118,"weaknessesCount":122,"isActivelyExploited":123,"cisaInfo":15,"otxData":15,"relatedBlogPosts":124,"seoMetadata":125,"configurations":150,"relatedVendorCves":164,"notableEvents":165},"CVE-2014-1903","What is CVE-2014-1903?","admin\u002Flibraries\u002Fview.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which allows remote attackers to execute arbitrary PHP code via the function and args parameters to admin\u002Fconfig.php.","admin\u002Flibraries\u002Fview.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restric...","2014-02-18T11:55:16.977","2025-04-11T00:51:21.963",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","HIGH",10,6.4,0.5181,[31,31,31,31,31,31,29],0.52775,"High",[34,38,41,44],{"vendor":35,"product":35,"version":36,"criteria":37,"vulnerable":4},"freepbx","2.10","cpe:2.3:a:freepbx:freepbx:2.10:*:*:*:*:*:*:*",{"vendor":35,"product":35,"version":39,"criteria":40,"vulnerable":4},"2.11","cpe:2.3:a:freepbx:freepbx:2.11:*:*:*:*:*:*:*",{"vendor":35,"product":35,"version":42,"criteria":43,"vulnerable":4},"2.12","cpe:2.3:a:freepbx:freepbx:2.12:*:*:*:*:*:*:*",{"vendor":45,"product":35,"version":46,"criteria":47,"vulnerable":4},"sangoma","2.9","cpe:2.3:a:sangoma:freepbx:2.9:*:*:*:*:*:*:*",4,[50,54,57,61,64,68,71,75,79,82,85,89,93,95,97,99,101,103,105,107,109,111,113,115],{"url":51,"source":52,"tags":53},"http:\u002F\u002Farchives.neohapsis.com\u002Farchives\u002Ffulldisclosure\u002F2014-02\u002F0097.html","Neohapsis",[],{"url":55,"source":52,"tags":56},"http:\u002F\u002Farchives.neohapsis.com\u002Farchives\u002Ffulldisclosure\u002F2014-02\u002F0111.html",[],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fcode.freepbx.org\u002Fchangelog\u002FFreePBX_Framework?cs=a29382efeb293ef4f42aa9b841dfc8eabb2d1e03","Freepbx",[],{"url":62,"source":59,"tags":63},"http:\u002F\u002Fcode.freepbx.org\u002Fchangelog\u002FFreePBX_SVN?cs=16429",[],{"url":65,"source":59,"tags":66},"http:\u002F\u002Fissues.freepbx.org\u002Fbrowse\u002FFREEPBX-7117",[67],"Vendor Advisory",{"url":69,"source":59,"tags":70},"http:\u002F\u002Fissues.freepbx.org\u002Fbrowse\u002FFREEPBX-7123",[67],{"url":72,"source":73,"tags":74},"http:\u002F\u002Fosvdb.org\u002F103240","Osvdb",[],{"url":76,"source":77,"tags":78},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F125166\u002FFreePBX-2.x-Code-Execution.html","Packetstormsecurity",[],{"url":80,"source":77,"tags":81},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F125215\u002FFreePBX-2.9-Remote-Code-Execution.html",[],{"url":83,"source":59,"tags":84},"http:\u002F\u002Fwww.freepbx.org\u002Fnews\u002F2014-02-06\u002Fsecurity-vulnerability-notice",[],{"url":86,"source":87,"tags":88},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F531040\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fgithub.com\u002F0x00string\u002Foldays\u002Fblob\u002Fmaster\u002FCVE-2014-1903.pl","GitHub",[],{"url":51,"source":52,"tags":94},[],{"url":55,"source":52,"tags":96},[],{"url":58,"source":59,"tags":98},[],{"url":62,"source":59,"tags":100},[],{"url":65,"source":59,"tags":102},[67],{"url":69,"source":59,"tags":104},[67],{"url":72,"source":73,"tags":106},[],{"url":76,"source":77,"tags":108},[],{"url":80,"source":77,"tags":110},[],{"url":83,"source":59,"tags":112},[],{"url":86,"source":87,"tags":114},[],{"url":90,"source":91,"tags":116},[],24,[119],{"id":120,"name":120,"description":121},"Unknown","CWE-264",1,false,[],{"title":126,"metaDescription":127,"keywords":128,"canonicalUrl":129,"structuredData":130},"What is CVE-2014-1903? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-1903, a high severity cyber security vulnerability from 2014. High exploit probability (51.8%). admin\u002Flibraries\u002Fview.funct...","CVE-2014-1903, CVE-2014-1903 vulnerability, CVE-2014-1903 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, freepbx security, sangoma security, freepbx vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2014-1903",{"@context":131,"@type":132,"headline":126,"description":127,"datePublished":10,"dateModified":11,"author":133,"publisher":137,"about":141,"mainEntityOfPage":145,"articleSection":148,"keywords":149},"https:\u002F\u002Fschema.org","TechArticle",{"@type":134,"name":135,"url":136},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":134,"name":135,"url":136,"logo":138},{"@type":139,"url":140},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":142,"name":6,"description":143,"additionalType":144},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":146,"@id":147},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-1903","Cybersecurity","CVE-2014-1903, CVE-2014-1903 vulnerability, CVE-2014-1903 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[151],{"Operator":15,"Negate":15,"Nodes":152},[153],{"Operator":154,"Negate":15,"CPEMatch":155},"OR",[156,158,160,162],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":157,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2A91F7BB-328B-446A-82F5-006372BB6A55",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":159,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"218DEE69-9011-4F41-8652-9546A575A066",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":161,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2074522D-B309-488E-8FF3-CB04FC862306",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"04919406-CF00-4CEA-8D63-B2F13C93C05F",[],[166],{"id":167,"eventType":168,"eventTime":169,"details":170,"label":171,"color":172},"375b8c84-5c1d-4d3c-8ff9-89e77dfd5113","LOW_EPSS_DELTA","2026-06-16T04:06:44.145558+00:00","Daily EPSS score decreased by 0.323 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":174,"version":21},1792437151885,{"score":176,"band":177,"action":178,"scoredAt":179},51,"Medium","Plan remediation","2026-10-19T06:42:50.310798+00:00"]