903 matches found
CVE-2022-4868: Improper Authorization
Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
PT-2022-28153 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to improper authorization in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve...
CVE-2022-4868 Improper Authorization in froxlor/froxlor
Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
PT-2022-28152 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. CSRF is an attack that tricks a user into performing unintended actions on a web application...
Froxlor 跨站请求伪造漏洞
Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 2.0.0-beta1, which stems from cross-site request forgery CSRF...
CVE-2022-4867: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864 Argument Injection in froxlor/froxlor
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864 Argument Injection in froxlor/froxlor
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864
CVE-2022-4864 affects Froxlor (froxlor/froxlor) prior to 2.0.0-beta1. The root cause is argument/parameter injection in the web application, evidenced by an HTML injection PoC and references to parameter handling weaknesses in the vulnerable release. Impact is limited to confidential/integrity ex...
CVE-2022-4864 Argument Injection in froxlor/froxlor
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
Froxlor 注入漏洞
Froxlor is a lightweight server management software from the Froxlor team. An injection vulnerability exists in versions prior to Froxlor 2.0.0-beta1, which stems from parameter injection...
CVE-2022-4864: Improper Neutralization of Argument Delimiters in a Command
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
PT-2022-28149 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Argument Injection in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve the...
HTML Injection
froxlor is vulnerable to HTML Injection. The vulnerability exists due to index.php which allows an attacker to inject and execute malicious HTML content into the login webpage...
HTML Injection
froxlor/froxlor is vulnerable to HTML Injection. The vulnerability exists due to invalid email address in index on error message which allows an attacker can inject and execute malicious HTML content in the web page through the edit customer option in the library...
GHSA-6RJV-XXGR-V57X Froxlor vulnerable to code injection
Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2...
Froxlor vulnerable to code injection
Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2...
CVE-2022-3869
Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...
