1055 matches found
Froxlor security vulnerabilities
Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.0.13, which stems from the ability to log in with a password that is stored in the database as an MD5 hash, leading to type obfuscation in PHP, which can be...
SUSE CVE-2023-1033
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Froxlor 2.0.6 Remote Command Execution Exploit
Froxlor versions 2.0.6 and below suffer from a bug that allows authenticated users to change the application logs path to any directory on the OS level which the user www-data can write without restrictions from the backend which leads to writing a malicious Twig template that the application wil...
GHSA-P7QQ-RRVW-X55X Froxlor Cross-Site Request Forgery vulnerability
Froxlor prior to version 2.0.11 has a Cross-Site Request Forgery vulnerability...
Froxlor Cross-Site Request Forgery vulnerability
Froxlor prior to version 2.0.11 has a Cross-Site Request Forgery vulnerability...
CVE-2023-1033
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Froxlor Cross-Site Request Forgery Vulnerability
Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 2.0.11. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...
CVE-2023-1033
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
PT-2023-16704 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: Froxlor versions prior to 2.0.11 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. This type of attack forces a user to execute unintended actions on a web application that they are...
CVE-2023-1033: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Code Injection
froxlor/froxlor is vulnerable to Code Injection. The vulnerability is due to improper sanitization in the import settings feature, which allows an attacker to inject and execute malicious code though the system cronjob...
GHSA-VP4R-H765-5MWP Code Injection in froxlor/froxlor
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...
Code Injection in froxlor/froxlor
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...
CVE-2023-0877
CVE-2023-0877 affects Froxlor prior to 2.0.11. Affected component: Froxlor software; vulnerability type: Code Injection (as described in multiple sources). Root cause details are not exhaustively described in the provided documents, but the CVE is reported with a Network attack vector and high im...
PT-2023-16581
Name of the Vulnerable Software and Affected Versions froxlor versions prior to 2.0.11 Description The issue concerns code injection in the GitHub repository froxlor/froxlor. Recommendations For versions prior to 2.0.11, update to version 2.0.11 or later to resolve the issue...