Back to the CVE list
CVE-2025-57819 CISA KEV · Actively exploited

SQL injection in Sangoma Freepbx

CVSS score

9.8

EPSS probability

%95.0

Risk score

18.6

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

FreePBX CVE-2025-57819 lab (Docker) + Nuclei POC for unauth SQLi (time-based). (★1)

Public PoCSource updated: 04.09.2025 13:01:05

Detection for CVE-2025-57819 (★0)

Public PoCSource updated: 29.08.2025 16:31:01

This is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819 (★0)

Public PoCSource updated: 29.08.2025 21:01:39

Detects vulnerable FreePBX versions affected by CVE-2025-57819. (★0)

Public PoCSource updated: 07.12.2025 17:50:29

FreePBX SQL Injection Exploit (★0)

Public PoCSource updated: 02.09.2025 01:32:48

A write up of CVE-2025-57819, a vulnerability affecting FreePBX 15, 16, and 17 (★0)

Public PoCSource updated: 02.09.2025 09:33:59

CVE-2025-57819 (★0)

Public PoCSource updated: 08.09.2025 23:09:51

FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in endpoints. (★0)

Public PoCSource updated: 13.09.2025 02:58:40

Safe, read-only SQL Injection checker for FreePBX (CVE-2025-57819), using error/boolean/time-based techniques with per-parameter verdicts and JSON reporting. (★0)

Public PoCSource updated: 15.09.2025 00:55:16

This repository includes two PoC scripts for CVE-2025-57819 in FreePBX: one to create a new admin user (poc_admin.py), and another to extract credentials using sqlmap (poc_auto_get_username_pass.py). For educational and authorized use only. (★0)

Public PoCSource updated: 19.09.2025 05:54:25

🔍 Detect SQL injection risks in FreePBX's admin interface safely and efficiently, providing actionable insights and clean JSON reports for security teams. (★0)

Public PoCSource updated: 05.10.2025 08:04:48

CVE-2025-57819 poc (★0)

Public PoCSource updated: 07.06.2026 05:55:53

FreePBX Pre-Auth SQLi to RCE (CVE-2025-57819) — All-in-One Exploit (★0)

Public PoCSource updated: 07.06.2026 09:58:03

Unauthenticated SQL injection in FreePBX Endpoint Manager (CVE-2025-57819) that injects a cron-scheduled PHP webshell for remote code execution. (★0)

Public PoCSource updated: 08.06.2026 02:58:29

Unauthenticated SQL Injection to Remote Code Execution in FreePBX — CVE-2025-57819 (★0)

Public PoCSource updated: 08.06.2026 19:30:35

FreePBX 17.0.2 - Remote Code Execution (RCE)

Exploit referenceSource updated: 03.09.2026 00:00:00

Nuclei: FreePBX - Remote Code Execution

Exploit reference

https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-57819"