CVE-2019-11410: Fusionpbx

High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days.

app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host.

Affected products

• Fusionpbx Fusionpbx: version 4.4.3 only

Published 2019-06-17. Last modified 2026-06-17.