159 matches found
Artica Proxy - Unauthenticated LFI
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
Artica Proxy 4.30.000000 - Cross-Site Scripting
Artica Proxy 4.30.000000 contains a cross-site scripting vulnerability via the password parameter in /fw.login.php. id: CVE-2022-37153 info: name: Artica Proxy 4.30.000000 - Cross-Site Scripting author: arafatansari severity: medium description: | Artica Proxy 4.30.000000 contains a cross-site...
CVE-2024-2054
CVE-2024-2054 Artica-Proxy 管理 Web 应用程序不安全反序列化（RCE） 针对 ARTICA PROXY 管理 Web 应用程序 CVE-2024-2054 的漏洞利用概念验证（PoC） 博客文章 更多详情请参见：https://blog.sonicwall.com/en-us/2024/03/unpatched-php-deserialization-vulnerability-in-artica-proxy/ 使用方法 root@kitploit: $ python3 CVE-2024-2054.py Enter url:...
CVE-2020-13159
CVE-2020-13159 - Artica Proxy avant 4.30.000000 Community Edition permet de multiples injections de commandes système. Description du produit : Artica Tech propose une solution puissante mais simple à utiliser, généralement réservée aux grandes entreprises et aux multinationales. Avec un prix de...
CVE-2024-2053
استغلال LFI إلى RCE عن طريق تسميم السجلات استغلال Python3 لـ CVE-2024-2053 Artica Proxy 📝 الوصف يستغل هذا البرنامج النصي Python3 ثغرات تضمين الملفات المحلية LFI لتحقيق تنفيذ الأوامر عن بُعد RCE عبر تقنيات تسميم السجلات. تم تصميمه خصيصًا لـ Artica Proxy CVE-2024-2053 ولكنه قابل للتكيف مع سيناريوها...
CVE-2020-15053
CVE-2020-15053 : Artica Proxy avant 4.28.030418 Community Edition permet un Cross Site Scripting réfléchi. Description du produit : Artica Tech propose une solution puissante mais simple à utiliser, généralement réservée aux grandes entreprises et aux multinationales. Avec un prix de départ de...
CVE-2020-15052
CVE-2020-15052 : Artica Proxy avant 4.28.030418 Community Edition permet une injection SQL. Description du produit : Artica Tech propose une solution puissante mais simple à utiliser, généralement l'apanage des grandes entreprises et des multinationales. Avec un prix de départ de seulement 99 € e...
CVE-2026-66745
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745
Artica Proxy 4.50 (before SP7) is affected by a session-fixation flaw that allows an unauthenticated attacker to hijack an admin session by pre-setting a known PHPSESSID on a victim’s browser prior to login through fw.login.php, gaining a fully authenticated admin session on port 9000. Affected v...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
EUVD-2026-49955
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
VulnCheck KEV: CVE-2024-2053
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
CVE-2021-41739
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...
CVE-2022-37153
An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...
CVE-2020-10818
Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field...
CVE-2019-7300
Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldapadmin and ldappassword fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field...
EUVD-2019-16844
Malware in sbrugna...