161 matches found
CVE-2020-15053
CVE-2020-15053 : Artica Proxy 4.28.030418 Community Edition より前のバージョンには、反射型クロスサイトスクリプティングの脆弱性があります。 製品説明: Artica Tech は、通常は大企業や多国籍企業向けとされる、強力でありながら使いやすいソリューションを提供しています。わずか99ユーロからの価格で、62,000以上のアクティブサーバーを擁する Artica Proxy は、過去10年間にわたりオープンソースプロジェクトとして開発され、中小企業や公共機関が低コストで組織と従業員をインターネットの危険から守ることを支援していま...
CVE-2020-15052
CVE-2020-15052 : Artica Proxy 4.28.030418 Community Edition 이전 버전에서 SQL 인젝션이 가능합니다. 제품 설명: Artica Tech는 강력하면서도 사용하기 쉬운 솔루션을 제공하며, 일반적으로 대기업 및 다국적 기업의 전유물입니다. 단 99€의 시작 가격과 62,000개 이상의 활성 서버를 갖춘 Artica Proxy는 지난 10년 동안 오픈 소스 프로젝트로 개발되어 중소기업과 공공 기관이 조직과 직원을 인터넷 위험으로부터 저렴한 비용으로 보호할 수 있도록 지원합니다. 설명:...
Artica Proxy 4.30.000000 - Cross-Site Scripting
Artica Proxy 4.30.000000 contains a cross-site scripting vulnerability via the password parameter in /fw.login.php. id: CVE-2022-37153 info: name: Artica Proxy 4.30.000000 - Cross-Site Scripting author: arafatansari severity: medium description: | Artica Proxy 4.30.000000 contains a cross-site...
CVE-2024-2054
CVE-2024-2054 Applicazione web amministrativa Artica-Proxy deserializzazione non sicura RCE Un proof of concept di exploit per l'applicazione web amministrativa ARTICA PROXY CVE-2024-2054 Articolo del blog Maggiori dettagli qui:...
Artica Proxy - Unauthenticated LFI
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
CVE-2020-13159
CVE-2020-13159 - Artica Proxy precedente alla 4.30.000000 Community Edition consente molteplici iniezioni di comandi del sistema operativo. Descrizione del prodotto: Artica Tech offre una soluzione potente ma semplice da usare, di solito prerogativa delle grandi aziende e delle multinazionali. Co...
CVE-2020-13158
CVE-2020-13158 - Artica Proxy antes da Edição Comunitária 4.30.000000 permite Directory Traversal Descrição do Produto: A Artica Tech oferece uma solução poderosa, mas simples de usar, geralmente reservada a grandes empresas e multinacionais. Com um preço inicial de apenas 99€ e mais de 62 000...
CVE-2020-15051
CVE-2020-15051 : Artica Proxy prima della versione 4.28.030418 Community Edition permette Cross Site Scripting Memorizzato. Descrizione del prodotto: Artica Tech offre una soluzione potente ma semplice da usare, solitamente riservata alle grandi aziende e multinazionali. Con un prezzo di partenza...
CVE-2024-2053
लॉग पॉइज़निंग के माध्यम से LFI से RCE एक्सप्लॉइट Python3 एक्सप्लॉइट CVE-2024-2053 Artica Proxy के लिए 📝 विवरण यह Python3 स्क्रिप्ट लॉग पॉइज़निंग तकनीकों के माध्यम से रिमोट कोड निष्पादन RCE प्राप्त करने के लिए लोकल फ़ाइल समावेशन LFI कमजोरियों का शोषण करती है। विशेष रूप से Artica Proxy CVE-2024-205...
CVE-2026-66745
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745
Artica Proxy 4.50 (before SP7) is affected by a session-fixation flaw that allows an unauthenticated attacker to hijack an admin session by pre-setting a known PHPSESSID on a victim’s browser prior to login through fw.login.php, gaining a fully authenticated admin session on port 9000. Affected v...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
EUVD-2026-49955
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
VulnCheck KEV: CVE-2024-2053
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
CVE-2021-41739
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...
CVE-2022-37153
An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...
CVE-2020-10818
Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field...
CVE-2019-7300
Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldapadmin and ldappassword fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field...