[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBhhSLAF54OMgU-liYtnDq2SMZeK_wvMrwq9vN5QLhw4":3,"g5a-risk:CVE-2018-15892":109},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":39,"epssPercentile":14,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":59,"weaknesses":60,"weaknessesCount":48,"isActivelyExploited":69,"cisaInfo":14,"otxData":14,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":105,"notableEvents":106},"CVE-2018-15892","What is CVE-2018-15892?","FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the \u002Fadmin\u002Fconfig.php?display=disa&view=form page.","2019-06-20T17:15:09.893","2019-06-24T20:30:35.42",4.3,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":29,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","HIGH","REQUIRED","UNCHANGED","MEDIUM",0.9,3.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":4},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":26,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6,6.8,6.4,0.00523,[39,39,39,39,39,39,39],"Medium",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"freepbx","disa","*","cpe:2.3:a:freepbx:disa:*:*:*:*:*:*:*:*",1,[50,55],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwiki.freepbx.org\u002Fdisplay\u002FFOP\u002F2018-09-11+DISA+SQL+Injection","Freepbx",[54],"Vendor Advisory",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fwww.freepbx.org\u002F",[58],"Product",2,[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",false,[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2018-15892? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-15892, a medium severity cyber security vulnerability from 2019. FreePBX 13 and 14 has SQL Injection in the DISA module vi...","CVE-2018-15892, CVE-2018-15892 vulnerability, CVE-2018-15892 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, freepbx security, disa vulnerability","\u002Fwhat-is\u002Fcve-2018-15892",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":9,"dateModified":10,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-15892","Cybersecurity","CVE-2018-15892, CVE-2018-15892 vulnerability, CVE-2018-15892 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97],{"Operator":14,"Negate":14,"Nodes":98},[99],{"Operator":100,"Negate":14,"CPEMatch":101},"OR",[102],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":103,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":104,"VersionEndIncluding":14},"E6262CD7-69C7-4C51-B82B-4C9C7D0C8A26","13.0.6.2",[],[],{"lastModified":10,"cacheTime":108,"version":32},1792440844453,{"score":110,"band":111,"action":112,"scoredAt":113},19,"Info","Track","2026-10-19T07:00:42.638565+00:00"]