Froxlor 2.0.6 Remote Command Execution Exploit

Froxlor versions 2.0.6 and below suffer from a bug that allows authenticated users to change the application logs path to any directory on the OS level which the user www-data can write without restrictions from the backend which leads to writing a malicious Twig template that the application wil...

GHSA-P7QQ-RRVW-X55X Froxlor Cross-Site Request Forgery vulnerability

Froxlor prior to version 2.0.11 has a Cross-Site Request Forgery vulnerability...

Froxlor Cross-Site Request Forgery vulnerability

Froxlor prior to version 2.0.11 has a Cross-Site Request Forgery vulnerability...

CVE-2023-1033

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

Froxlor 跨站请求伪造漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 2.0.11. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

PT-2023-16704 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: Froxlor versions prior to 2.0.11 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. This type of attack forces a user to execute unintended actions on a web application that they are...

CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

Code Injection

froxlor/froxlor is vulnerable to Code Injection. The vulnerability is due to improper sanitization in the import settings feature, which allows an attacker to inject and execute malicious code though the system cronjob...

Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...

GHSA-VP4R-H765-5MWP Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...

CVE-2023-0877

CVE-2023-0877 affects Froxlor prior to 2.0.11. Affected component: Froxlor software; vulnerability type: Code Injection (as described in multiple sources). Root cause details are not exhaustively described in the provided documents, but the CVE is reported with a Network attack vector and high im...

CVE-2023-0877 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...

CVE-2023-0877 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...

CVE-2023-0877 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...

Froxlor 代码注入漏洞

Froxlor is a lightweight server management software from the Froxlor team. A code injection vulnerability exists in Froxlor versions prior to 2.0.11, which stems from the presence of code injection...

SUSE CVE-2016-5100

Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value...

SUSE CVE-2018-12642

Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user...