3CX Phone System Web Client Management Console - Panel Detect

What is the "3CX Phone System Web Client Management Console - Panel Detect?"

The "3CX Phone System Web Client Management Console - Panel Detect" module is designed to detect the presence of the 3CX Phone System Web Client Management Console panel. This module targets the 3CX Phone System, a software-based PBX that offers unified communications solutions.

This module has an informative severity level, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by idealphase.

Impact

The detection of the 3CX Phone System Web Client Management Console panel does not directly impact the security or functionality of the system. It serves as an informative module to identify the presence of this specific component.

How does the module work?

The module works by sending an HTTP GET request to the "/webclient/" path of the target system. It then applies matching conditions to the response to determine if the 3CX Webclient title and description are present.

Example HTTP request:

GET /webclient/ HTTP/1.1
Host: [target host]

The matching conditions used in this module are:

- The response must contain the "<title>3CX Webclient</title>" tag. - The response must contain the "<meta name="description" content="3CX">" tag.

If both conditions are met, the module reports the detection of the 3CX Phone System Web Client Management Console panel.

References:

- 3CX Phone System - 3CX Web Client