2 matches found
Cross site scripting
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting XSS attack involving the username-form-id parameter to freeradius.users.php...
8.5CVSS8.5AI score0.08708EPSS
SaveExploits6References4Affected Software1
CVE-2017-17055: Improper Neutralization of Special Elements used in an OS Command
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting XSS attack involving the username-form-id parameter to freeradius.users.php...
9CVSS8.4AI score0.08708EPSS
SaveExploits6References2
20