Froxlor 跨站请求伪造漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 2.0.0-beta1, which stems from cross-site request forgery CSRF...

CVE-2022-4867: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864

CVE-2022-4864 affects Froxlor (froxlor/froxlor) prior to 2.0.0-beta1. The root cause is argument/parameter injection in the web application, evidenced by an HTML injection PoC and references to parameter handling weaknesses in the vulnerable release. Impact is limited to confidential/integrity ex...

Froxlor 注入漏洞

Froxlor is a lightweight server management software from the Froxlor team. An injection vulnerability exists in versions prior to Froxlor 2.0.0-beta1, which stems from parameter injection...

CVE-2022-4864: Improper Neutralization of Argument Delimiters in a Command

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

PT-2022-28149 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Argument Injection in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve the...

HTML Injection

froxlor is vulnerable to HTML Injection. The vulnerability exists due to index.php which allows an attacker to inject and execute malicious HTML content into the login webpage...

HTML Injection

froxlor/froxlor is vulnerable to HTML Injection. The vulnerability exists due to invalid email address in index on error message which allows an attacker can inject and execute malicious HTML content in the web page through the edit customer option in the library...

GHSA-6RJV-XXGR-V57X Froxlor vulnerable to code injection

Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2...

Froxlor vulnerable to code injection

Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2...

CVE-2022-3869

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

Code injection

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

CVE-2022-3869 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

PT-2022-24530 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor/froxlor versions prior to 0.10.38.2 Description: The issue is related to code injection in the GitHub repository froxlor/froxlor. There are no known workarounds for this issue. Recommendations: For versions prior to 0.10.38.2, upgrade...

Froxlor 跨站脚本漏洞

Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in versions of Froxlor prior to 0.10.38.2 that stems from command injection...

CVE-2022-3869 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

CVE-2022-3869

The provided sources confirm a code/injection vulnerability in froxlor/froxlor prior to version 0.10.38.2. Multiple documents (CVE-2022-3869 overview, Nuclei template, OSV, CNNVD, Veracode) describe HTML/Code Injection in Froxlor, typically via user input handling (e.g., customermail) and imprope...