3 matches found
GHSA-6FVW-X6GW-4WV8 Froxlor SQL injection vulnerability
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name...
9.8CVSS9.7AI score0.11812EPSS
SaveExploits4References5
SQL Injection
froxlor/froxlor is vulnerable to SQL injection. An unauthenticated attacker is able to inject and execute arbitrary SQL commands in the database through Database/Manager/DbManagerMySQL.php via a custom DB name...
9.8CVSS5.1AI score0.11812EPSS
SaveExploits4References3Affected Software1
CVE-2021-42325: Improper Neutralization of Special Elements used in an SQL Command
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name...
9.8CVSS5.8AI score0.11812EPSS
SaveExploits4References2
20