Netfortris vulnerabilities

Products

• Trixbox 10

Newest

• fonality trixbox community edition, netfortris trixbox +1 more Fonality Trixbox CE Post-Authentication Command Injection CVE-2020-7351 Public exploit EPSS 65.2% 7.3 HighMay 1, 2020
• netfortris trixbox trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages... CVE-2017-14537 Public exploit EPSS 39.3% 6.5 MediumFebruary 16, 2018
• netfortris trixbox trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language... CVE-2017-14536 5.4 MediumFebruary 16, 2018
• netfortris trixbox trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint... CVE-2017-14535 Public exploit EPSS 50.1% 8.8 HighFebruary 16, 2018
• netfortris trixbox maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary... CVE-2014-5112 Public exploit 7.5 HighJuly 28, 2014
• netfortris trixbox Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read... CVE-2014-5111 Public exploit EPSS 21.6% 5.0 MediumJuly 28, 2014
• netfortris trixbox Cross-site scripting (XSS) vulnerability in user/help/html/index.php in Fonality trixbox allows... CVE-2014-5110 4.3 MediumJuly 28, 2014
• netfortris trixbox SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox... CVE-2014-5109 Public exploit 7.5 HighJuly 28, 2014
• netfortris trixbox SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4... CVE-2010-0702 Public exploit 7.5 HighFebruary 23, 2010
• netfortris trixbox registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and... CVE-2007-6424 4.3 MediumDecember 18, 2007