CVE-2017-14537

🗓️ 16 Feb 2018 04:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 107 Views🌐 WEB

trixbox 2.8.0.4 path traversal via xajaxargs array paramete

Reporter	Title	Published	Views	Family All 9
0day.today	Trixbox 2.8.0.4 - (lang) Path Traversal Exploit	28 May 202100:00	–	zdt
Circl	CVE-2017-14537	28 May 202109:47	–	circl
Cvelist	CVE-2017-14537	16 Feb 201804:00	–	cvelist
Exploit DB	Trixbox 2.8.0.4 - 'lang' Path Traversal	28 May 202100:00	–	exploitdb
Nuclei	Trixbox 2.8.0 - Path Traversal	3 Jun 202606:04	–	nuclei
NVD	CVE-2017-14537	16 Feb 201804:29	–	nvd
OSV	CVE-2017-14537	16 Feb 201804:29	–	osv
Packet Storm	Trixbox 2.8.0.4 Path Traversal	28 May 202100:00	–	packetstorm
Prion	Path traversal	16 Feb 201804:29	–	prion

NVD

Node

netfortris trixboxMatch2.8.0.4

Source	Link
secur1tyadvisory	www.secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/
securityfocus	www.securityfocus.com/bid/103007
github	www.github.com/Hacker5preme/Exploits/tree/main/CVE-2017-14537-Exploit
packetstormsecurity	www.packetstormsecurity.com/files/162853/Trixbox-2.8.0.4-Path-Traversal.html

Parameter	Position	Path	Description	CWE
xajaxargs	query param	/maint/index.php?packages	Path traversal via xajaxargs parameter to /maint/index.php?packages	CWE-22
lang	query param	/maint/modules/home/index.php?lang=	Path traversal via lang parameter to /maint/modules/home/index.php	CWE-22

21 Nov 2024 03:13Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 3.16.5

EPSS0.85497

trixbox 2.8.0.4 path traversal xajaxargs parameter security vulnerability