Unscored severity · published Sep 28, 2010
CVE-2010-3490
Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated…
–
CVSS
9.4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.4% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freepbx · Sangoma
through 2.8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3490
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3490
www.exploit-db.com
http://www.exploit-db.com/exploits/15098
www.freepbx.org
http://www.freepbx.org/trac/ticket/4553
www.securityfocus.com
http://www.securityfocus.com/archive/1/513947/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/43454
www.trustwave.com
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-005.txt
More from Freepbx
9.8
CVE-2025-57819
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
9.8
CVE-2019-19006
Sangoma FreePBX Improper Authentication Vulnerability
7.2
CVE-2025-64328
FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
9.8
CVE-2026-73665
FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
9.8
CVE-2026-73663
FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover