CVE-2010-3490 Path traversal in n/a
Authenticated administrators can exploit a directory traversal flaw to create arbitrary PHP files, leading to remote code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2010-3490?
CVE-2010-3490 is a medium-severity path traversal vulnerability in Sangoma Freepbx, published on 28 Sep 2010. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root.
Weakness: CWE-22
Which versions are affected by CVE-2010-3490?
It affects 1 product.
Products include Sangoma Freepbx.
How do I fix CVE-2010-3490?
No fix has been published for CVE-2010-3490 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2010-3490 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-3490 exists.
Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.
Other vulnerabilities in Sangoma Freepbx
- CVE-2025-57819 Sangoma FreePBX Authentication Bypass
- CVE-2019-19006 Sangoma FreePBX Improper Authentication
- CVE-2026-73663 FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
- CVE-2026-73665 FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
- CVE-2026-46376 FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface
Sources
Also known as GHSA-wrmq-cw6w-55hx.