CVE-2006-6244: Coalescent Systems FreePBX

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in (1) CALLERID(name) or (2) CALLERID(number).

Affected products

• Coalescent Systems FreePBX: up to and including 2.1.3

Published 2006-12-04. Last modified 2026-06-16.