CVE-2008-6896: 3cx Phone System

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive information via unspecified vectors that reveal the installation path.

Affected products

• 3cx Phone System: version 6.0.806.0 only

Published 2009-08-03. Last modified 2026-06-16.