CVE-2020-15052

CVE-2020-15052 : Artica Proxy 4.28.030418 Community Edition より前のバージョンでSQLインジェクションが可能です。 製品説明: Artica Techは、強力でありながら使いやすいソリューションを提供しています。これは通常、大企業や多国籍企業向けのものです。開始価格はわずか99€で、6万2,000以上のアクティブサーバーを擁するArtica Proxyは、過去10年にわたりオープンソースプロジェクトとして開発され、中小企業や公共機関が組織と従業員を低コストでインターネットの危険から保護することを支援しています。 説明: Arti...

Artica Web Proxy 4.30 - OS Command Injection

Artica Web Proxy 4.30 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via servicecmdspeform. id: CVE-2020-17505 info: name: Artica Web Proxy 4.30 - OS Command Injection author: dwisiswant0...

Pandora FMS 7.0NG - Remote Command Injection

Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. id: CVE-2019-20224 info: name: Pandora FMS 7.0NG - Remote Command Injection author: ritikchaddha severity: hig...

Artica Proxy Community Edition <4.30.000000 - Local File Inclusion

Artica Proxy Community Edition before 4.30.000000 is vulnerable to local file inclusion via the fw.progrss.details.php popup parameter. id: CVE-2020-13158 info: name: Artica Proxy Community Edition 4.30.000000 - Local File Inclusion author: 0xAkoko severity: high description: Artica Proxy Communi...

Artica Proxy 4.30.000000 - Cross-Site Scripting

Artica Proxy 4.30.000000 contains a cross-site scripting vulnerability via the password parameter in /fw.login.php. id: CVE-2022-37153 info: name: Artica Proxy 4.30.000000 - Cross-Site Scripting author: arafatansari severity: medium description: | Artica Proxy 4.30.000000 contains a cross-site...

Artica Proxy - Unauthenticated LFI

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...

CVE-2024-2054

CVE-2024-2054 Artica-Proxy 管理 Web 应用程序不安全反序列化（RCE） 针对 ARTICA PROXY 管理 Web 应用程序 CVE-2024-2054 的漏洞利用概念验证（PoC） 博客文章 更多详情请参见：https://blog.sonicwall.com/en-us/2024/03/unpatched-php-deserialization-vulnerability-in-artica-proxy/ 使用方法 root@kitploit: $ python3 CVE-2024-2054.py Enter url:...

CVE-2020-15051

CVE-2020-15051 : Artica Proxy 4.28.030418 社区版之前版本存在存储型跨站脚本 产品描述： Artica Tech 提供了一款强大但易于使用的解决方案，这通常是大型和跨国公司的专属。起价仅 99 欧元，拥有超过 62,000 个活跃服务器，Artica Proxy 作为开源项目在过去 10 年中不断发展，帮助中小企业和公共机构以低成本保护其组织和员工免受互联网威胁。 描述： Artica Proxy 4.28.030418 社区版之前版本存在跨站脚本漏洞，涉及输入字段：服务器域名、您的电子邮件地址、组名称、MySQL 服务器、数据库、MySQL...

CVE-2020-13159

CVE-2020-13159 - 在 Artica Proxy 4.30.000000 Community Edition 之前版本中存在多个操作系统命令注入漏洞 产品描述： Artica Tech 提供强大但易于使用的解决方案，这通常是大型和跨国公司的专属。Artica Proxy 的起价仅为 99 欧元，拥有超过 62,000 台活跃服务器，在过去 10 年中作为开源项目开发，帮助中小企业和公共机构以低成本保护其组织和员工免受网络威胁。 描述： 在 Artica Proxy 4.30.000000 Community Edition 之前版本中，攻击者可以通过 Netbios...

CVE-2024-2053

लॉग पॉइज़निंग के माध्यम से LFI से RCE एक्सप्लॉइट Python3 एक्सप्लॉइट CVE-2024-2053 Artica Proxy के लिए 📝 विवरण यह Python3 स्क्रिप्ट लॉग पॉइज़निंग तकनीकों के माध्यम से रिमोट कोड निष्पादन RCE प्राप्त करने के लिए लोकल फ़ाइल समावेशन LFI कमजोरियों का शोषण करती है। विशेष रूप से Artica Proxy CVE-2024-205...

CVE-2020-13158

CVE-2020-13158 - Artica Proxy 4.30.000000 से पहले का सामुदायिक संस्करण निर्देशिका ट्रैवर्सल की अनुमति देता है उत्पाद विवरण: Artica Tech एक शक्तिशाली लेकिन उपयोग में सरल समाधान प्रदान करता है, जो आमतौर पर बड़ी और बहुराष्ट्रीय कंपनियों के लिए आरक्षित होता है। मात्र 99€ की शुरुआती कीमत और 62,000 से...

Artica Pandora FMS 7.44 - Remote Code Execution

Artica Pandora FMS 7.44 allows remote command execution via the events feature. id: CVE-2020-13851 info: name: Artica Pandora FMS 7.44 - Remote Code Execution author: theamanrawat severity: high description: | Artica Pandora FMS 7.44 allows remote command execution via the events feature. impact:...

Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php. id: CVE-2020-17506 info: name: Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection author:...

CVE-2020-15053

CVE-2020-15053 : Artica Proxy vor 4.28.030418 Community Edition erlaubt Reflektiertes Cross-Site-Scripting. Produktbeschreibung: Artica Tech bietet eine leistungsstarke, aber einfach zu bedienende Lösung, die normalerweise großen und multinationalen Unternehmen vorbehalten ist. Mit einem Startpre...

CVE-2026-66745

Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...

CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php

Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...

CVE-2026-66745

Artica Proxy 4.50 (before SP7) is affected by a session-fixation flaw that allows an unauthenticated attacker to hijack an admin session by pre-setting a known PHPSESSID on a victim’s browser prior to login through fw.login.php, gaining a fully authenticated admin session on port 9000. Affected v...

CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php

Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...

EUVD-2026-49955

Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...

VulnCheck KEV: CVE-2020-8497

In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps...