| Package | Affected versions | Patched versions |
|---|---|---|
| trixbox | = 2.0= 2.4.2.0≤ 2.6.1 |
Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the langChoice parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free