929 matches found
SUSE CVE-2023-0316
Path Traversal: '..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0...
SUSE CVE-2023-0564
Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10...
SUSE CVE-2023-0565
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...
SUSE CVE-2023-0566
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in froxlor/froxlor prior to 2.0.10...
SUSE CVE-2023-0572
Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10...
SUSE CVE-2023-0671
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
Privilege Escalation
froxlor/froxlor is vulnerable to Privilege Escalation. The vulnerability exists due to improper validation of user uploaded files, which allows an attacker to inject and execute malicious code into the system, resulting in privilege escalation...
HTML Injection
froxlor/froxlor is vulnerable to HTML Injection. The vulnerability is due to the Interval Time in the Dropdown Menu of the cronjob page, which doesn't validate the input, allowing an attacker to change to time to a stored HTML Injection due to the update function in Cronjobs.php...
Weak Password Requirements
froxlor/froxlor is vulnerable to Weak Password Requirements. The vulnerability exists in add and update functions of DirProtections.php, which allows users to create weak passwords resulting in account takeovers via bruteforce attacks...
Information Disclosure
froxlor/froxlor is vulnerable to Information Disclosure. A remote attacker is able to gain access to unauthorized user data via a failed prepared SQL query due to an unchecked error condition, resulting in the disclosure of sensitive information...
SQL Injection
froxlor/froxlor is vulnerable to SQL Injection. The vulnerability exists in the Database parameter in errorreport.php due to improperly validated parameters, allowing a remote attacker to inject arbitrary SQL commands...
GHSA-9FQC-9CPR-W73Q froxlor is vulnerable to privilege escalation from customer to root via directory-options
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
froxlor is vulnerable to privilege escalation from customer to root via directory-options
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
CVE-2023-0671
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
Code injection
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
CVE-2023-0671
Froxlor vulnerability CVE-2023-0671 affects froxlor/froxlor prior to version 2.0.10. Root cause is code injection in the project, with potential privilege escalation to root (as indicated by related advisories). The fix is to update to version 2.0.10 or later. Exploitation details are not provide...
CVE-2023-0671 Code Injection in froxlor/froxlor
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
PT-2023-16442 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.10 Description: The issue concerns code injection in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.10, update to version 2.0.10 or later to resolve the issue...
Froxlor 代码注入漏洞
Froxlor is a lightweight server management software from the Froxlor team. A code injection vulnerability exists in Froxlor versions prior to 2.0.10, which can be exploited by an attacker to gain root privileges...
