CVE-2017-14536

trixbox 2.8.0.4 has XSS via the PATHINFO to /maint/index.php or /user/includes/language/langChooser.php...

CVE-2017-14536

CVE-2017-14536 affects the trixbox 2.8.0.4 release and is a cross-site scripting (XSS) vulnerability triggered via PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php. The available data describe the vulnerability as an XSS flaw without details on exploitation steps, affected...

PT-2018-5681

Name of the Vulnerable Software and Affected Versions: trixbox version 2.8.0.4 Description: The issue is related to a security problem where an attacker can execute malicious scripts in the browser of other users, potentially leading to unauthorized actions. This is achieved by manipulating the...

CVE-2017-14536: Improper Neutralization of Input During Web Page Generation

trixbox 2.8.0.4 has XSS via the PATHINFO to /maint/index.php or /user/includes/language/langChooser.php...