CRLF Injection

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to CRLF Injection in the validateUrl process. An attacker can inject arbitrary web-server configuration lines by supplying a crafted subdomain redirect URL containing carriage return and...