673 matches found
CVE-2023-0565
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...
CVE-2023-5564
Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1...
CVE-2023-3192
Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...
CVE-2023-3172
Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...
CVE-2023-2666
Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16...
CVE-2023-1307
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-0671
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
CVE-2023-0572
Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10...
CVE-2023-0315
Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8...
CVE-2023-0877
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...
CVE-2023-2034
Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14...
CVE-2023-1033
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
CVE-2023-3173
Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...
CVE-2023-6069
Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...
CVE-2022-4867
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-3017
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...
CVE-2022-4868
Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2021-42325
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name...
CVE-2020-29653
Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of this parameter is reflected in the login webpage, allowing the injection of arbitrary HTML tags...