CVE-2025-11371 PoC — Gladinet CentreStack and TrioFox Local File Inclusion Flaw

Source

https://github.com/lap1nou/CVE-2025-11371

Associated Vulnerability

Title: Gladinet CentreStack and TrioFox Local File Inclusion Flaw (CVE-2025-11371)
Description:In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

Description

CVE-2025-11371 PoC, credit goes to Huntress, https://www.huntress.com/blog/gladinet-centrestack-triofox-local-file-inclusion-flaw

Readme

# Disclaimer
This project is published for **educational and research purposes only**.

Use of this software for attacking targets without **explicit prior consent** is **illegal**.  
The author is **not responsible** for any misuse, damage, or legal consequences resulting from the use of this code.

Always follow **responsible disclosure practices** and test only in **controlled environments** that you own or have permission to use.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →