CVE-2010-0702

概要

参考情報

• packetstormsecurity.org/1002-exploits/tribox-sql.txt · Exploit
• exploit-db.com/exploits/11508 · Exploit
• securityfocus.com/bid/38323 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/56407 · VDB Entry

trixbox のその他の脆弱性

• CVE-2020-7351高 8.8An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to ex…
• CVE-2017-14537中 6.5trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/ho…
• CVE-2017-14536中 5.4trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php.
• CVE-2017-14535高 8.8trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.
• CVE-2007-6424中 4.3registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote w…