CVE-2008-6825

EPSS 20.3%

Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the langChoice parameter.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/16904unverified exploitdbwww.exploit-db.com/exploits/6045unverified cve_referencewww.exploit-db.com/exploits/6026unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/fulldisclosure/2008-07/0101.html http://osvdb.org/50421 https://exchange.xforce.ibmcloud.com/vulnerabilities/43686 https://www.exploit-db.com/exploits/6026 http://www.securityfocus.com/bid/30135