5 matches found
Sql injection
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name...
CVE-2021-42325
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name...
CVE-2021-42325: Improper Neutralization of Special Elements used in an SQL Command
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name...
PT-2021-23570
Name of the Vulnerable Software and Affected Versions Froxlor versions 0.10.28 through 0.10.29.1 Description The issue allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name. This can potentially lead to remote code execution RCE. Recommendations For versions 0.10.28...
Froxlor SQL injection vulnerability
Froxlor is a lightweight server management software from the Froxlor team. a security vulnerability exists in Froxlor that allows SQL injection via custom database names in the database manager DbManagerMySQL.php. no details of the vulnerability are currently provided...