Full title: Trixbox XSS / LFI / SQL Injection / Code Execution Vulnerabilities 
Category: web applications
Platform: php
Trixbox suffers from cross site scripting, local file inclusion, SQL injection, and remote code execution vulnerabilities.

# 0day.today @ http://0day.today/