netfortris

Top products

The 10 most recently published vulnerabilities affecting netfortris.

• CVE-2020-7351Fonality Trixbox CE Post-Authentication Command Injection7.3May 1, 2020
• CVE-2017-14537trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.6.5Feb 16, 2018
• CVE-2017-14536trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php.5.4Feb 16, 2018
• CVE-2017-14535trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.8.8Feb 16, 2018
• CVE-2014-5109SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action.7.5Jul 28, 2014
• CVE-2014-5110Cross-site scripting (XSS) vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inject arbitrary web script or HTML via the id_nodo parameter.4.3Jul 28, 2014
• CVE-2014-5112maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter.7.5Jul 28, 2014
• CVE-2014-5111Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter to (1) home/index.php, (2) asterisk_info/ast...5.0Jul 28, 2014
• CVE-2010-0702SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter.7.5Feb 23, 2010
• CVE-2007-6424registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote web site without sufficiently validating the origin of the...4.3Dec 18, 2007