CVE-2017-14536

Description

References

• securityfocus.com/bid/103009 · Third Party Advisory
• secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-cross-site-scripting-vulnerabilities · Exploit

trixbox 的其他漏洞

• CVE-2020-7351高危 8.8An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to ex…
• CVE-2017-14537中危 6.5trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/ho…
• CVE-2017-14535高危 8.8trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.
• CVE-2010-0702高危 7.5SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL…
• CVE-2007-6424中危 4.3registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote w…