POC Details: 175a3535ab953adacc99216c94c5dcef0e5e5cab

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/3cx-installer.yaml

Associated Vulnerability

Likely 0-day

Description

A 3CX Phone System installer or setup wizard page is publicly accessible. This web-based configuration tool is used for initial PBX setup including admin credential creation, SIP trunk configuration, license activation, and network settings. Exposure of this page allows unauthenticated attackers to reconfigure or take over the phone system.

File Snapshot


 id: 3cx-installer

info:
  name: 3CX Phone System - Installer Page Exposure
  author: DhiyaneshDk
  

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.