Lucene search
+L

903 matches found

Positive Technologies
Positive Technologies
•added 2022/11/05 12:00 a.m.•12 views

PT-2022-24530 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor/froxlor versions prior to 0.10.38.2 Description: The issue is related to code injection in the GitHub repository froxlor/froxlor. There are no known workarounds for this issue. Recommendations: For versions prior to 0.10.38.2, upgrade...

6.5CVSS6.4AI score0.01353EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2022/11/05 12:00 a.m.•14 views

Froxlor 跨站脚本漏洞

Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in versions of Froxlor prior to 0.10.38.2 that stems from command injection...

6.5CVSS6.4AI score0.01353EPSS
SaveExploits1References3
CVE
CVE
•added 2022/11/05 12:00 a.m.•119 views

CVE-2022-3869

The provided sources confirm a code/injection vulnerability in froxlor/froxlor prior to version 0.10.38.2. Multiple documents (CVE-2022-3869 overview, Nuclei template, OSV, CNNVD, Veracode) describe HTML/Code Injection in Froxlor, typically via user input handling (e.g., customermail) and imprope...

6.5CVSS6.7AI score0.01353EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/11/05 12:00 a.m.•32 views

CVE-2022-3869 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

6.5CVSS6.6AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2022/11/05 12:00 a.m.•43 views

CVE-2022-3869 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

6.5CVSS6.8AI score0.01353EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/05 12:00 a.m.•2 views

CVE-2022-3869: Improper Control of Generation of Code

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2...

6.5CVSS6.7AI score0.01353EPSS
SaveExploits1References3
OSV
OSV
•added 2022/11/04 7:01 p.m.•48 views

GHSA-H95W-P3X6-WWJ6 Froxlor vulnerable to Code Injection

Froxlor prior to version 0.10.39 is vulnerable to Code Injection...

4.6CVSS4.6AI score0.00818EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/11/04 7:01 p.m.•29 views

Froxlor vulnerable to Code Injection

Froxlor prior to version 0.10.39 is vulnerable to Code Injection...

7.6CVSS5.2AI score0.00818EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2022/11/04 1:15 p.m.•30 views

CVE-2022-3721

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

7.6CVSS0.00818EPSS
SaveExploits0References3
Prion
Prion
•added 2022/11/04 1:15 p.m.•26 views

Code injection

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

4.9CVSS5AI score0.00818EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/04 12:00 a.m.•6 views

CVE-2022-3721 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

7.6CVSS5.1AI score0.00818EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/11/04 12:00 a.m.•10 views

PT-2022-23878 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: Froxlor versions prior to 0.10.39 Description: The issue concerns a Code Injection problem. It is reported that Froxlor is vulnerable to this issue. Recommendations: For versions prior to 0.10.39, update to version 0.10.39 or later to resolve...

7.6CVSS5.9AI score0.00818EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2022/11/04 12:00 a.m.•18 views

Froxlor 跨站脚本漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site scripting vulnerability exists in versions of Froxlor prior to 0.10.39 that stems from command injection...

7.6CVSS6.1AI score0.00818EPSS
SaveExploits0References3
CVE
CVE
•added 2022/11/04 12:00 a.m.•123 views

CVE-2022-3721

CVE-2022-3721 : Froxlor prior to version 0.10.39 contains a reported Code Injection vulnerability. Public sources describe impact as code execution paths arising from injection in Froxlor/froxlor, with remediation advising upgrade to 0.10.39 or later. Administrative impact is consistent with code...

7.6CVSS6.5AI score0.00818EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/11/04 12:00 a.m.•26 views

CVE-2022-3721 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

7.6CVSS6.4AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2022/11/04 12:00 a.m.•36 views

CVE-2022-3721 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

7.6CVSS5.4AI score0.00818EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/04 12:00 a.m.•1 views

CVE-2022-3721: Improper Control of Generation of Code

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

7.6CVSS6.5AI score0.00818EPSS
SaveExploits0References3
Veracode
Veracode
•added 2022/08/29 4:27 a.m.•28 views

Cross-Site Request Forgery (CSRF)

froxlor/froxlor is vulnerable to cross-site request forgery. The vulnerability exists due to the lack of security checks in the deleting api keys in apikeys.php, allowing an attacker to delete the api keys with the specified id by redirecting to the api key deletion endpoint through the GET reque...

6.5CVSS6.1AI score0.00427EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2022/08/29 12:00 a.m.•31 views

Froxlor vulnerable to Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

6.5CVSS6.3AI score0.00427EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/08/29 12:00 a.m.•31 views

GHSA-9XGP-3MXP-RV7X Froxlor vulnerable to Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

6.5CVSS6.5AI score0.00427EPSS
SaveExploits1References4
Rows per page
Query Builder