FreePBX SQL Injection Attempt (CVE-2025-57819)

Tim Peck@timpeck

•updated Oct 7, 2025•5•2•101

Detects attempts to exploit a SQL injection vulnerability (CVE-2025-57819) in FreePBX via a malicious GET request to '/admin/ajax.php'. Attackers leverage this to achieve remote code execution by inserting a malicious cron job.