QuickBox/QB

GitHub

github.com

quickbox.io

Releases12

Frequency5 months 1 week

Last Release about 4 years ago

Stars737

QuickBox is much more than a ‘seedbox installer script’, it is a simplistic approach to achieving easy seedbox and services management from a beautifully designed dashboard. Allowing users the ability to interact with their seedbox and server on a professional grade level.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-44981 ↗	Jan 24, 2022Monday, 24 January 2022, 13:15	8.8 HIGH	9 HIGH
In QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter value and parses it into a shell_exec(''); function without properly sanitizing any shell arguments, therefore remote code execution is possible. Additionally, as the media server is running as root by default attackers can use the sudo command within this shell_exec(''); function, which allows for privilege escalation by means of RCE.