Fonality trixbox - repo.php Directory Traversal

Fonality trixbox - repo.php Directory Traversal source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...

Fonality trixbox - 'endpoint_generic.php' SQL Injection

source: https://www.securityfocus.com/bid/68720/info Trixbox is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site scripting vulnerability 3. Multiple local file-include vulnerabilities 4. A remote code-execution vulnerability An attacker may levera...

Fonality trixbox - 'asterisk_info.php' Directory Traversal

source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

Fonality trixbox - 'repo.php' Directory Traversal

source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

Trixbox 2.6.1 - (langChoice) Remote Root Exploit (py)

No description provided by source. !/usr/bin/python TrixBox 2.6.1 langChoice remote root exploit muts from offensive-security.com All credits to Jean-Michel BESNARD [email protected] Same same, but different. http://www.offensive-security.com/0day/trixbox.py.txt id uid=0root gid=0root...

Trixbox CE 2.6.1 - langChoice PHP Local File Inclusion

No description provided by source...

Trixbox All Versions - SQL Injection

No description provided by source. Exploit Title: SQL injection in Trixbox All Versions Date: 13/03/2014 Exploit Author: Sc4nX Email : Sec744atyahoo.com - r1zathackermail.com Software Link: http://trixbox.org/downloads Tested on: Linux / Win 7 Example : Grab users / password hashes from ampusers?...

Trixbox (endpoint_aastra.php, mac param) - Remote Code Injection

No description provided by source. App : Trixbox all versions vendor : trixbox.com Author : i-Hmx mail : [email protected] Home : security arrays inc , sec4ever.com ,exploit4arab.net Well well well , we decided to give schmoozecom a break and have a look @ fonality products do you think they have...

Trixbox 2.4.2 - maint/index.php Query String XSS

No description provided by source. source: http://www.securityfocus.com/bid/27460/info The 'trixbox' product is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Trixbox 2.2.4 - PhonecDirectory.php SQL Injection

No description provided by source...

Trixbox 2.4.2 - user/index.php Query String XSS

No description provided by source. source: http://www.securityfocus.com/bid/27460/info The 'trixbox' product is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

trixbox Web Detection

Binary data trixboxwebdetect.nbin...

Trixbox 2.8.0.4 Cross Site Scripting

Exploit Title: Trixbox 2.8.0.4 XSS Exploit Date: 07/04/2014 Exploit Author: Daniel Moreno a.k.a W1ckerMan Vendor Homepage: http://sourceforge.net/projects/asteriskathome/ Version: 2.8.0.4 This exploit needs authentication...

trixbox 'mac'参数远程命令注入漏洞

Bugtraq ID:66238 trixbox是一款集成VoIP和CRM功能的开源方案。 trixbox 'endpointcfg/endpointaastra.php'不正确过滤用户提交给'mac'参数的数据，允许远程攻击者利用漏洞提交恶意请求执行任意命令。 0 trixbox 目前没有详细解决方案提供： http://trixbox.com maint/modules/endpointcfg/endpointaastra.php?action=Delete&mac=fa;echo idxx;faris...

Fonality trixbox - 'mac' Remote Code Injection

App : Trixbox all versions vendor : trixbox.com Author : i-Hmx mail : [email protected] Home : security arrays inc , sec4ever.com ,exploit4arab.net Well well well , we decided to give schmoozecom a break and have a look @ fonality products do you think they have better product than the Award...

Fonality trixbox - mac Remote Code Injection

Fonality trixbox - mac Remote Code Injection App : Trixbox all versions vendor : trixbox.com Author : i-Hmx mail : [email protected] Home : security arrays inc , sec4ever.com ,exploit4arab.net Well well well , we decided to give schmoozecom a break and have a look @ fonality products do you think...

Trixbox Pro Remote Command Execution

App : Trixbox all versions vendor : trixbox.com Author : i-Hmx mail : [email protected] Home : security arrays inc , sec4ever.com ,exploit4arab.net Well well well , we decided to give schmoozecom a break and have a look @ fonality products do you think they have better product than the Award...

Fonality trixbox - SQL Injection

Fonality trixbox - SQL Injection Exploit Title: SQL injection in Trixbox All Versions Date: 13/03/2014 Exploit Author: Sc4nX Email : Sec744atyahoo.com - r1zathackermail.com Software Link: http://trixbox.org/downloads Tested on: Linux / Win 7 Example : Grab users / password hashes from ampusers�...

Fonality trixbox - SQL Injection

Exploit Title: SQL injection in Trixbox All Versions Date: 13/03/2014 Exploit Author: Sc4nX Email : Sec744atyahoo.com - r1zathackermail.com Software Link: http://trixbox.org/downloads Tested on: Linux / Win 7 Example : Grab users / password hashes from ampusers� root@sc4nx python sqlmap.py -u...

DOMIT! RSS testing_domitrss.php discloses local files

Overview A vulnerability in DOMIT! RSS allows an attacker to read local files. Description DOMIT! RSS is an RSS parser for PHP. DOMIT! RSS includes a test script called testingdomitrss.php. This script writes out the contents of any user-supplied URL to a local file named the MD5 hash of the URL...