Search: CVE-2025-57819

FreePBX endpoint versions prior to 15.0.66, 16.0.89, and 17.0.3 contain a critical SQL injection vulnerability. This flaw allows unauthenticated attackers to manipulate the FreePBX Administrator database arbitrarily and potentially execute remote code. The vulnerability arises from insufficient sanitization of user-supplied data. The issue has been patched in the specified versions.

The provided document does not contain substantive threat intelligence or detailed information about the 'From Hijacked Pbx To Stolen Trunk Inj3ctor3s Campaign'. It appears to be a placeholder or verification page without actual content for analysis. Several CVE identifiers are mentioned but without descriptions or context. No active exploitation or specific malicious activities are detailed.