{"id":"CVE-2014-9001","aliases":["EUVD-2014-8829","GHSA-jggh-fp4x-pw2h"],"status":"published","title":"reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute...","description":"reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.028,"percentile":0.86557,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-94"],"published":"2014-11-20T11:00:00Z","modified":"2026-06-17T00:17:38Z","exploits":[{"source":"exploitdb","id":"EDB-35080","title":"Incredible PBX 2.0.6.5.0 - Remote Command Execution","type":"webapps","platform":"php","date":"2014-10-27","url":"https://www.exploit-db.com/exploits/35080"}],"products":[{"vendor":"incrediblepbx","product":"incredible_pbx_11"}],"references":[{"url":"http://seclists.org/fulldisclosure/2014/Oct/101","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9001"},{"url":"https://github.com/advisories/GHSA-jggh-fp4x-pw2h"}],"sources":{"cve":[{"id":"CVE-2014-9001","description":"reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.","status":"published","published":"2014-11-20T11:00:00Z","modified":"2024-09-16T23:51:59.143Z","updated_at":"2026-11-02T14:33:42.54191Z"}],"euvd":[{"id":"EUVD-2014-8829","description":"reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.","status":"published","published":"2014-11-20T11:00:00Z","modified":"2024-09-16T23:51:59Z","updated_at":"2026-11-03T00:29:04.415682Z"}],"ghsa":[{"id":"GHSA-jggh-fp4x-pw2h","title":"reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute...","description":"reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.","status":"published","published":"2022-05-17T04:21:08Z","modified":"2023-01-28T05:01:36Z","cwes":["CWE-94"],"updated_at":"2026-11-02T14:43:35.577766Z"}],"nvd":[{"id":"CVE-2014-9001","description":"reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) APPTMIN, (2) APPTHR, (3) APPTDA, (4) APPTMO, (5) APPTYR, or (6) APPTPHONE parameters.","status":"published","published":"2014-11-20T13:55:11.393Z","modified":"2026-06-17T00:17:38.46Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:02:57.304171Z"}]}}