CVE-2014-5112

High

Published: 28/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The home module in Fonality trixbox has a vulnerability that allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter.

Risk Assessment

Attackers could gain full control over the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update the software to the latest version and to validate and sanitize input data to minimize risk.

Other vulnerabilities in Fonality trixbox

CVE-2014-5109High
SQL injection vulnerability in endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action.

Original NVD description (English source)

maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter.