CVE-2022-4864

CVE-2022-4864 affects Froxlor (froxlor/froxlor) prior to 2.0.0-beta1. The root cause is argument/parameter injection in the web application, evidenced by an HTML injection PoC and references to parameter handling weaknesses in the vulnerable release. Impact is limited to confidential/integrity ex...

PT-2022-28149 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Argument Injection in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve the...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

HTML Injection

froxlor is vulnerable to HTML Injection. The vulnerability exists due to index.php which allows an attacker to inject and execute malicious HTML content into the login webpage...

HTML Injection

froxlor/froxlor is vulnerable to HTML Injection. The vulnerability exists due to invalid email address in index on error message which allows an attacker can inject and execute malicious HTML content in the web page through the edit customer option in the library...

Froxlor vulnerable to code injection

Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2...

GHSA-6RJV-XXGR-V57X Froxlor vulnerable to code injection

Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2...

CVE-2022-3869

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

Code injection

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

CVE-2022-3869 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

Froxlor 跨站脚本漏洞

Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in versions of Froxlor prior to 0.10.38.2 that stems from command injection...

CVE-2022-3869 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

CVE-2022-3869

The provided sources confirm a code/injection vulnerability in froxlor/froxlor prior to version 0.10.38.2. Multiple documents (CVE-2022-3869 overview, Nuclei template, OSV, CNNVD, Veracode) describe HTML/Code Injection in Froxlor, typically via user input handling (e.g., customermail) and imprope...

PT-2022-24530 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor/froxlor versions prior to 0.10.38.2 Description: The issue is related to code injection in the GitHub repository froxlor/froxlor. There are no known workarounds for this issue. Recommendations: For versions prior to 0.10.38.2, upgrade...

CVE-2022-3869 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

GHSA-H95W-P3X6-WWJ6 Froxlor vulnerable to Code Injection

Froxlor prior to version 0.10.39 is vulnerable to Code Injection...

Froxlor vulnerable to Code Injection

Froxlor prior to version 0.10.39 is vulnerable to Code Injection...

CVE-2022-3721

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

Code injection

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...