CVE-2017-14536

trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php.

• CWE-79

• http://www.securityfocus.com/bid/103009Third Party Advisory, VDB Entry
• https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-cross-site-scripting-vulnerabilities/Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/103009Third Party Advisory, VDB Entry
• https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-cross-site-scripting-vulnerabilities/Exploit, Third Party Advisory

Published

Feb 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14530WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7…8
• CVE-2017-14531ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUN…
• CVE-2017-14532ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIg…
• CVE-2017-14533ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in cod…
• CVE-2017-14534Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.2012…
• CVE-2017-14535trixbox 2.8.0.4 has OS command injection via shell metachara…8.8
• CVE-2017-14537trixbox 2.8.0.4 has path traversal via the xajaxargs array p…6.5
• CVE-2017-14538XnView Classic for Windows Version 2.40 allows attackers to …
• CVE-2017-14539IrfanView 4.44 - 32bit allows attackers to cause a denial of…
• CVE-2017-14540IrfanView 4.44 - 32bit allows attackers to cause a denial of…
• CVE-2017-14541XnView Classic for Windows Version 2.40 allows attackers to …
• CVE-2017-14542STDU Viewer 1.6.375 allows attackers to execute arbitrary co…