Approved changes feed: RSS · Atom

cpe:2.3:a:netfortris:trixbox:2.8.0.4:*:*:*:*:*:*:*

part: a version: 2.8.0.4 update: *

VendorNetfortris (61e49be9-f681-5097-b624-d486e92fadf1)
ProductTrixbox (ee18310c-296c-5926-99b0-d39261ef0d16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:sourceforge/asteriskathome purl2cpe 2026-06-01 10:13:03.817242

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14537 vulnerable 2026-06-08 05:08:50.101559 Details available
trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.
Published: 2018-02-16T04:00:00.000Z
Updated: 2024-08-05T19:27:40.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14536 vulnerable 2026-06-08 05:08:50.101193 Details available
trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php.
Published: 2018-02-16T04:00:00.000Z
Updated: 2024-08-05T19:27:40.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14535 vulnerable 2026-06-08 05:08:50.100793 Details available
trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.
Published: 2018-02-16T04:00:00.000Z
Updated: 2024-08-05T19:27:40.809Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.