CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4868 Improper Authorization in froxlor/froxlor

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4867

The CVE-2022-4867 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in froxlor/froxlor prior to version 2.0.0-beta1. Affected software is Froxlor (GitHub repository froxlor/froxlor). The underlying issue is CSRF in the application; exploitation details are not provided in the docu...

CVE-2022-4868 Improper Authorization in froxlor/froxlor

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

PT-2022-28153 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to improper authorization in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve...

Froxlor 授权问题漏洞

Froxlor is a lightweight server management software from the Froxlor team. An authorization issue vulnerability exists in versions prior to Froxlor 2.0.0-beta1 that stems from improper authorization...

CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

Froxlor 跨站请求伪造漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 2.0.0-beta1, which stems from cross-site request forgery CSRF...

PT-2022-28152 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. CSRF is an attack that tricks a user into performing unintended actions on a web application...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864

CVE-2022-4864 affects Froxlor (froxlor/froxlor) prior to 2.0.0-beta1. The root cause is argument/parameter injection in the web application, evidenced by an HTML injection PoC and references to parameter handling weaknesses in the vulnerable release. Impact is limited to confidential/integrity ex...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

Froxlor 注入漏洞

Froxlor is a lightweight server management software from the Froxlor team. An injection vulnerability exists in versions prior to Froxlor 2.0.0-beta1, which stems from parameter injection...

PT-2022-28149 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Argument Injection in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve the...

HTML Injection

froxlor is vulnerable to HTML Injection. The vulnerability exists due to index.php which allows an attacker to inject and execute malicious HTML content into the login webpage...

HTML Injection

froxlor/froxlor is vulnerable to HTML Injection. The vulnerability exists due to invalid email address in index on error message which allows an attacker can inject and execute malicious HTML content in the web page through the edit customer option in the library...

GHSA-6RJV-XXGR-V57X Froxlor vulnerable to code injection

Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2...

Froxlor vulnerable to code injection

Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2...