Lucene search
+L

2 matches found

NVD
NVD
•added 2026/10/13 2:17 p.m.•11 views

CVE-2026-109962

Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller accounts to read full-admin-only MySQL server and cronjob configuration via API read commands. Resellers can call MysqlServer.listing, MysqlServer.get, or Cronjobs.listing through api.php to obtain...

5.3CVSS0.00256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-109962: Improper Authorization

Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller accounts to read full-admin-only MySQL server and cronjob configuration via API read commands. Resellers can call MysqlServer.listing, MysqlServer.get, or Cronjobs.listing through api.php to obtain...

5.3CVSS6AI score0.00256EPSS
SaveExploits0References2
Rows per page
Query Builder