187 matches found
Artica Proxy 4.30.000000 - Cross-Site Scripting
Artica Proxy 4.30.000000 contains a cross-site scripting vulnerability via the password parameter in /fw.login.php. id: CVE-2022-37153 info: name: Artica Proxy 4.30.000000 - Cross-Site Scripting author: arafatansari severity: medium description: | Artica Proxy 4.30.000000 contains a cross-site...
Artica Proxy - Unauthenticated LFI
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
CVE-2020-13158
CVE-2020-13158 - Artica Proxy anterior a 4.30.000000 Community Edition permite Directory Traversal Descripción del producto: Artica Tech ofrece una solución potente pero fácil de usar, normalmente reservada para grandes empresas y multinacionales. Con un precio inicial de solo 99 € y más de 62 00...
CVE-2020-15051
CVE-2020-15051 : Artica Proxy anterior a 4.28.030418 Community Edition permite Cross Site Scripting Almacenado. Descripción del producto: Artica Tech ofrece una solución potente pero fácil de usar, normalmente reservada a grandes empresas y multinacionales. Con un precio inicial de solo 99€ y más...
CVE-2024-2053
Explotación LFI a RCE mediante Envenenamiento de Registros Exploit en Python3 para CVE-2024-2053 Artica Proxy 📝 Descripción Este script en Python3 explota vulnerabilidades de Inclusión Local de Archivos LFI para lograr Ejecución Remota de Código RCE mediante técnicas de envenenamiento de registro...
CVE-2020-15053
CVE-2020-15053 : Artica Proxy anterior a 4.28.030418 Community Edition permite Cross Site Scripting Reflejado. Descripción del Producto: Artica Tech ofrece una solución potente pero fácil de usar, generalmente reservada para grandes empresas y multinacionales. Con un precio inicial de solo 99 € y...
CVE-2020-15052
CVE-2020-15052 : Artica Proxy anterior a la versión 4.28.030418 Community Edition permite inyección SQL. Descripción del producto: Artica Tech ofrece una solución potente pero sencilla de usar, generalmente reservada para grandes empresas multinacionales. Con un precio inicial de solo 99 € y más ...
CVE-2020-13159
CVE-2020-13159 - Artica Proxy anterior a 4.30.000000 Community Edition permite múltiples inyecciones de comandos del sistema operativo. Descripción del producto: Artica Tech ofrece una solución potente pero fácil de usar, normalmente reservada para grandes empresas y multinacionales. Con un preci...
CVE-2024-2054
CVE-2024-2054 Aplicación web administrativa de Artica-Proxy: deserialización insegura RCE Una prueba de concepto de exploit para la aplicación web administrativa ARTICA PROXY CVE-2024-2054 Entrada del blog Más detalles aquí:...
CVE-2026-66745
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745
Artica Proxy 4.50 (before SP7) is affected by a session-fixation flaw that allows an unauthenticated attacker to hijack an admin session by pre-setting a known PHPSESSID on a victim’s browser prior to login through fw.login.php, gaining a fully authenticated admin session on port 9000. Affected v...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
EUVD-2026-49955
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745: Improper Control of Generation of Code
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
PT-2026-65565
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
VulnCheck KEV: CVE-2024-2053
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
CVE-2021-41739
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...