929 matches found
SUSE CVE-2023-1307
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
Froxlor is vulnerable to authentication bypass
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
GHSA-J83X-R9QQ-9G4V Froxlor is vulnerable to authentication bypass
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307 Authentication Bypass by Primary Weakness in froxlor/froxlor
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307 Authentication Bypass by Primary Weakness in froxlor/froxlor
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307
Froxlor (versions prior to 2.0.13) is affected by an authentication bypass vulnerability (CVE-2023-1307). The root cause involves login handling tied to a password stored as an MD5 hash in the database, enabling an attacker to authenticate despite an invalid password due to PHP type obfuscation. ...
CVE-2023-1307: Authentication Bypass by Primary Weakness
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
Froxlor 安全漏洞
Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.0.13, which stems from the ability to log in with a password that is stored in the database as an MD5 hash, leading to type obfuscation in PHP, which can be...
SUSE CVE-2023-1033
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Froxlor 2.0.6 Remote Command Execution Exploit
Froxlor versions 2.0.6 and below suffer from a bug that allows authenticated users to change the application logs path to any directory on the OS level which the user www-data can write without restrictions from the backend which leads to writing a malicious Twig template that the application wil...
Froxlor Cross-Site Request Forgery vulnerability
Froxlor prior to version 2.0.11 has a Cross-Site Request Forgery vulnerability...
GHSA-P7QQ-RRVW-X55X Froxlor Cross-Site Request Forgery vulnerability
Froxlor prior to version 2.0.11 has a Cross-Site Request Forgery vulnerability...
CVE-2023-1033
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
PT-2023-16704 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: Froxlor versions prior to 2.0.11 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. This type of attack forces a user to execute unintended actions on a web application that they are...
Froxlor 跨站请求伪造漏洞
Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 2.0.11. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...
CVE-2023-1033: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
