1064 matches found
CVE-2020-36978
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...
EUVD-2020-30871
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...
CVE-2020-36978 Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...
CVE-2020-36978
Froxlor Server Management Panel 0.10.16 is affected by a persistent Cross-Site Scripting (XSS) vulnerability in the customer registration input fields. An attacker can inject malicious scripts via the username, name, or firstname parameters, which are then executed in the administrator’s browser ...
CVE-2020-36978 Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...
CVE-2020-36978: Improper Neutralization of Input During Web Page Generation
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...
Froxlor cross-site scripting vulnerabilities
Froxlor is a set of lightweight server management software developed by the Froxlor team. Version 0.10.16 of Froxlor contains a cross-site scripting vulnerability, which stems from improper cleaning of customer registration input fields. This vulnerability may lead to storage-based cross-site...
CVE-2023-4304
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...
CVE-2018-12642
Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user...
CVE-2020-10237
An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time,...
CVE-2023-4829
Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...
CVE-2023-50256
Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...
CVE-2024-34070
Froxlor is open source server administration software. Prior to 2.1.9, a Stored Blind Cross-Site Scripting XSS vulnerability was identified in the Failed Login Attempts Logging Feature of the Froxlor Application. An unauthenticated User can inject malicious scripts in the loginname parameter on t...
EUVD-2015-5904
Malware in sbrugna...
EUVD-2022-7531
Malicious code in bioql PyPI...
EUVD-2022-7490
Malicious code in bioql PyPI...
EUVD-2024-0264
Malicious code in bioql PyPI...
EUVD-2022-6528
Malicious code in bioql PyPI...