| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | TrixBox CE 2.8.0.4 Command Execution Exploit | 7 May 202000:00 | – | zdt |
 | CVE-2020-7351 | 28 Apr 202000:00 | – | attackerkb |
 | CVE-2020-7351 | 4 May 202021:23 | – | circl |
 | NetFortris Fonality Trixbox endpoint_devicemap.php Component OS Command Injection Vulnerability | 6 May 202000:00 | – | cnvd |
 | CVE-2020-7351 Fonality Trixbox CE Post-Authentication Command Injection | 1 May 202015:50 | – | cvelist |
 | TrixBox CE endpoint_devicemap.php Authenticated Command Execution | 4 May 202020:58 | – | metasploit |
 | CVE-2020-7351 | 1 May 202016:15 | – | nvd |
 | CVE-2020-7351 | 1 May 202016:15 | – | osv |
 | TrixBox CE 2.8.0.4 Command Execution | 5 May 202000:00 | – | packetstorm |
 | Command injection | 1 May 202016:15 | – | prion |
10
Node
[
{
"product": "Trixbox Community Edition",
"vendor": "Fonality",
"versions": [
{
"status": "unaffected",
"version": "1.0"
},
{
"status": "unaffected",
"version": "1.1"
},
{
"lessThanOrEqual": "2.8.0.4",
"status": "affected",
"version": "2.8.0.4",
"versionType": "custom"
}
]
}
]| Source | Link |
|---|---|
| github | www.github.com/rapid7/metasploit-framework/pull/13353 |
| packetstormsecurity | www.packetstormsecurity.com/files/157565/TrixBox-CE-2.8.0.4-Command-Execution.html |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| network | request body | maint/modules/endpointcfg/endpoint_devicemap.php | Authenticated OS command injection via the endpoint_devicemap.php endpoint in Trixbox CE. | CWE-78 |
| network | request body | maint/modules/11_endpointcfg/endpoint_devicemap.php | Authenticated OS command injection via the endpoint_devicemap.php endpoint in Trixbox CE (variant path). | CWE-78 |
| network | request body | maint/endpoint_devicemap.php | Authenticated OS command injection via the endpoint_devicemap.php endpoint in Trixbox CE (legacy path). | CWE-78 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 03:24Current
8.3High risk
Vulners AI Score8.3
CVSS 3.17.3 - 8.8
CVSS 29
EPSS0.65208