POC Details: 175a3535ab953adacc99216c94c5dcef0e5e5cab

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/3cx-installer.yaml

Associated Vulnerability

3CX Phone System - Installer Page Exposure Detection template

Description

A 3CX Phone System installer or setup wizard page is publicly accessible. This web-based configuration tool is used for initial PBX setup including admin credential creation, SIP trunk configuration, license activation, and network settings. Exposure of this page allows unauthenticated attackers to reconfigure or take over the phone system.

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →