Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-52207
9.9
CRITICALCVSS v3
Published
June 27, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.
mikopbx/Core
GitHubMikoPBX — free open-source PBX for small business, built on Asterisk 22, PHP 8.4, and Phalcon 5. Deploy as ISO, Docker, LXC, or in the cloud.
GitHubMikoPBX — free open-source PBX for small business, built on Asterisk 22, PHP 8.4, and Phalcon 5. Deploy as ISO, Docker, LXC, or in the cloud.NVD