CVE-2025-12480 PoC — TrioFox 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12480.yaml

Associated Vulnerability

Title:TrioFox 安全漏洞 (CVE-2025-12480)
Description:TrioFox是美国TrioFox公司的一个远程访问软件。 Triofox 16.7.10368.56560之前版本存在安全漏洞，该漏洞源于访问控制不当，可能导致访问初始设置页面。

Description

The Gladinet Triofox solution before 12.91.1126.65588 and CentreStack before 12.10.595.65696 allow unauthenticated access to the /management/admindatabase.aspx endpoint, exposing sensitive database management functionality to anyone with network access. An unauthenticated attacker can remotely access, view, and potentially interact with the database management interface, risking data disclosure or system compromise.

File Snapshot


 id: CVE-2025-12480

info:
  name: Triofox - Improper Access Control
  author: johnk3r,gti
  severity

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!