177 matches found
Artica Proxy 4.30.000000 - Cross-Site Scripting
Artica Proxy 4.30.000000 contains a cross-site scripting vulnerability via the password parameter in /fw.login.php. id: CVE-2022-37153 info: name: Artica Proxy 4.30.000000 - Cross-Site Scripting author: arafatansari severity: medium description: | Artica Proxy 4.30.000000 contains a cross-site...
CVE-2024-2053
Exploitation LFI vers RCE via Empoisonnement des Logs Exploit Python3 pour CVE-2024-2053 Artica Proxy 📝 Description Ce script Python3 exploite les vulnérabilités d'inclusion de fichiers locaux LFI pour atteindre l'exécution de code à distance RCE via des techniques d'empoisonnement des logs. Conç...
Artica Proxy - Unauthenticated LFI
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
CVE-2020-13158
CVE-2020-13158 - Artica Proxy до версии 4.30.000000 Community Edition допускает Directory Traversal Описание продукта: Artica Tech предлагает мощное, но простое в использовании решение, которое обычно является прерогативой крупных и транснациональных компаний. При начальной цене всего 99 € и боле...
CVE-2020-15051
CVE-2020-15051 : Artica Proxy avant la version 4.28.030418 Community Edition permet un Cross Site Scripting stocké. Description du produit : Artica Tech propose une solution puissante mais simple d'utilisation, généralement réservée aux grandes entreprises et multinationales. Avec un prix de dépa...
CVE-2020-15053
CVE-2020-15053 : Artica Proxy до 4.28.030418 Community Edition допускает отраженный межсайтовый скриптинг. Описание продукта: Artica Tech предлагает мощное, но простое в использовании решение, обычно доступное крупным и транснациональным компаниям. При начальной цене всего 99 евро и более 62 000...
CVE-2020-15052
CVE-2020-15052 : Artica Proxy avant 4.28.030418 Community Edition permet une injection SQL. Description du produit : Artica Tech propose une solution puissante mais simple à utiliser, généralement l'apanage des grandes entreprises et des multinationales. Avec un prix de départ de seulement 99 € e...
CVE-2020-13159
CVE-2020-13159 - Artica Proxy до версии 4.30.000000 Community Edition допускает множественное внедрение команд операционной системы. Описание продукта: Artica Tech предлагает мощное, но простое в использовании решение, обычно доступное только крупным и транснациональным компаниям. При начальной...
CVE-2024-2054
CVE-2024-2054 Application web administrative Artica-Proxy - désérialisation non sécurisée RCE Une preuve de concept d'exploitation pour l'application web administrative ARTICA PROXY CVE-2024-2054 Article de blog Plus de détails ici :...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745
Artica Proxy 4.50 (before SP7) is affected by a session-fixation flaw that allows an unauthenticated attacker to hijack an admin session by pre-setting a known PHPSESSID on a victim’s browser prior to login through fw.login.php, gaining a fully authenticated admin session on port 9000. Affected v...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
EUVD-2026-49955
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2026-66745: Improper Control of Generation of Code
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
PT-2026-65565
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
VulnCheck KEV: CVE-2024-2053
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
CVE-2021-41739
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...