Trixbox langChoice PHP Local File Inclusion

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ -- coding: utf-8 -- require 'msf/core' class...

CVE-2008-6825

Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. dot dot in the langChoice parameter...

CVE-2008-6825

creationtimestamp| type| source ---|---|--- 2008-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6026 2008-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6045 2011-01-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16904 2018-05-29...

Trixbox langChoice PHP Local File Inclusion

This module injects php into the trixbox session file and then, in a second call, evaluates that code by manipulating the langChoice parameter as described in OSVDB-50421. Module Options msf use exploit/unix/webapp/trixbox/langchoice msf undefinedlangchoice show actions ...actions... msf...