trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/162853/Trixbox-2.8.0.4-Path-Traversal.html | Exploit Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/103007 | Third Party Advisory VDB Entry |
| https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-14537-Exploit | Exploit Third Party Advisory |
| https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/ | Exploit Third Party Advisory |
| http://packetstormsecurity.com/files/162853/Trixbox-2.8.0.4-Path-Traversal.html | Exploit Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/103007 | Third Party Advisory VDB Entry |
| https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-14537-Exploit | Exploit Third Party Advisory |
| https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/ | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 03:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/162853/Trixbox-2.8.0.4-Path-Traversal.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () http://www.securityfocus.com/bid/103007 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-14537-Exploit - Exploit, Third Party Advisory | |
| References | () https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/ - Exploit, Third Party Advisory |
Information
Published : 2018-02-16 04:29
Updated : 2024-11-21 03:13
NVD link : CVE-2017-14537
Mitre link : CVE-2017-14537
CVE.ORG link : CVE-2017-14537
JSON object : View
Products Affected
netfortris
- trixbox
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')