PT-2018-5682

Name of the Vulnerable Software and Affected Versions: trixbox version 2.8.0.4 Description: The issue concerns path traversal via the xajaxargs array parameter to "/maint/index.php?packages" or the lang parameter to "/maint/modules/home/index.php". Recommendations: For trixbox version 2.8.0.4,...

PT-2018-5680

Name of the Vulnerable Software and Affected Versions: trixbox version 2.8.0.4 Description: The issue is related to OS command injection via shell metacharacters in the lang parameter to the "/maint/modules/home/index.php" API endpoint. This allows for potential exploitation. Recommendations: For...

PT-2014-6289

Name of the Vulnerable Software and Affected Versions Fonality trixbox affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter in the maint/modules/home/index.php file. Recommendations At the moment...

CVE-2014-5112: Improper Control of Generation of Code

maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter...