CVE-2010-0702

Fonality Trixbox 2.2.4 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Exploits (1)

exploitdb WORKING POC

by NorSlacker · textwebappsphp

https://www.exploit-db.com/exploits/11508

View Code ZIP pw:eip

References (4)

Core 4

Core References

Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

http://www.exploit-db.com/exploits/11508

VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/56407

Exploit x_refsource_misc

http://packetstormsecurity.org/1002-exploits/tribox-sql.txt

Exploit, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/38323

Scores

EPSS 0.0053

EPSS Percentile 67.4%

Details

CWE

CWE-89

Status published

Products (1)

netfortris/trixbox 2.2.4

Published Feb 23, 2010

Tracked Since Feb 18, 2026