169 matches found
CVE-2014-5110: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inject arbitrary web script or HTML via the idnodo parameter...
PT-2014-6287 · Fonality · Trixbox
Name of the Vulnerable Software and Affected Versions: Fonality trixbox affected versions not specified Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id nodo parameter in the user/help/html/index.php file...
PT-2014-6286 · Fonality · Trixbox
Name of the Vulnerable Software and Affected Versions: Fonality trixbox affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the mac parameter in a Submit action within the maint/modules/endpointcfg/endpoi...
CVE-2014-5112: Improper Control of Generation of Code
maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter...
Trixbox XSS / LFI / SQL Injection / Code Execution Vulnerabilities
Trixbox suffers from cross site scripting, local file inclusion, SQL injection, and remote code execution vulnerabilities. Trixbox All Version - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected ...
Fonality trixbox - endpoint_generic.php SQL Injection
Fonality trixbox - endpointgeneric.php SQL Injection source: https://www.securityfocus.com/bid/68720/info Trixbox is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site scripting vulnerability 3. Multiple local file-include vulnerabilities 4. A remot...
Trixbox XSS / LFI / SQL Injection / Code Execution
Trixbox All Version - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.trixbox.com/ 1 Sql Injection...
Fonality trixbox - index.php Directory Traversal
Fonality trixbox - index.php Directory Traversal source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...
Fonality trixbox - repo.php Directory Traversal
Fonality trixbox - repo.php Directory Traversal source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...
Fonality trixbox - 'endpoint_generic.php' SQL Injection
source: https://www.securityfocus.com/bid/68720/info Trixbox is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site scripting vulnerability 3. Multiple local file-include vulnerabilities 4. A remote code-execution vulnerability An attacker may levera...
Fonality trixbox - 'asterisk_info.php' Directory Traversal
source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...
Fonality trixbox - 'repo.php' Directory Traversal
source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...
Trixbox 2.6.1 - (langChoice) Remote Root Exploit (py)
No description provided by source. !/usr/bin/python TrixBox 2.6.1 langChoice remote root exploit muts from offensive-security.com All credits to Jean-Michel BESNARD [email protected] Same same, but different. http://www.offensive-security.com/0day/trixbox.py.txt id uid=0root gid=0root...
Trixbox All Versions - SQL Injection
No description provided by source. Exploit Title: SQL injection in Trixbox All Versions Date: 13/03/2014 Exploit Author: Sc4nX Email : Sec744atyahoo.com - r1zathackermail.com Software Link: http://trixbox.org/downloads Tested on: Linux / Win 7 Example : Grab users / password hashes from ampusers?...
Trixbox CE 2.6.1 - langChoice PHP Local File Inclusion
No description provided by source...
Trixbox (endpoint_aastra.php, mac param) - Remote Code Injection
No description provided by source. App : Trixbox all versions vendor : trixbox.com Author : i-Hmx mail : [email protected] Home : security arrays inc , sec4ever.com ,exploit4arab.net Well well well , we decided to give schmoozecom a break and have a look @ fonality products do you think they have...
Trixbox 2.4.2 - user/index.php Query String XSS
No description provided by source. source: http://www.securityfocus.com/bid/27460/info The 'trixbox' product is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Trixbox 2.2.4 - PhonecDirectory.php SQL Injection
No description provided by source...
Trixbox 2.4.2 - maint/index.php Query String XSS
No description provided by source. source: http://www.securityfocus.com/bid/27460/info The 'trixbox' product is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
