Netfortris

10 CVEs across 1 Netfortris products. Browse Netfortris vulnerabilities, severities, and proof-of-concept exploits.

Netfortris products with known CVEs

ProductCVEs
Trixbox10
Netfortris CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-7351High7.32020-05-01An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on t…
CVE-2017-14537Medium6.52018-02-16trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.
CVE-2017-14536Medium5.42018-02-16trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php.
CVE-2017-14535High8.82018-02-16trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.
CVE-2014-51122014-07-28maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter.
CVE-2014-51112014-07-28Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter to (1)…
CVE-2014-51102014-07-28Cross-site scripting (XSS) vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2014-51092014-07-28SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via…
CVE-2010-07022010-02-23SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the I…
CVE-2007-64242007-12-18registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote web site without suf…