1064 matches found
GHSA-J83X-R9QQ-9G4V Froxlor is vulnerable to authentication bypass
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
Froxlor is vulnerable to authentication bypass
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307: Authentication Bypass by Primary Weakness
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307 Authentication Bypass by Primary Weakness in froxlor/froxlor
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307 Authentication Bypass by Primary Weakness in froxlor/froxlor
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1307
Froxlor (versions prior to 2.0.13) is affected by an authentication bypass vulnerability (CVE-2023-1307). The root cause involves login handling tied to a password stored as an MD5 hash in the database, enabling an attacker to authenticate despite an invalid password due to PHP type obfuscation. ...
CVE-2023-1307
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
PT-2023-16879
Name of the Vulnerable Software and Affected Versions froxlor versions prior to 2.0.13 Description The issue is related to an authentication bypass by primary weakness in the GitHub repository froxlor/froxlor. Recommendations For versions prior to 2.0.13, update to version 2.0.13 or later to...
Froxlor security vulnerabilities
Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.0.13, which stems from the ability to log in with a password that is stored in the database as an MD5 hash, leading to type obfuscation in PHP, which can be...
SUSE CVE-2023-1033
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Froxlor 2.0.6 Remote Command Execution Exploit
Froxlor versions 2.0.6 and below suffer from a bug that allows authenticated users to change the application logs path to any directory on the OS level which the user www-data can write without restrictions from the backend which leads to writing a malicious Twig template that the application wil...
GHSA-P7QQ-RRVW-X55X Froxlor Cross-Site Request Forgery vulnerability
Froxlor prior to version 2.0.11 has a Cross-Site Request Forgery vulnerability...
Froxlor Cross-Site Request Forgery vulnerability
Froxlor prior to version 2.0.11 has a Cross-Site Request Forgery vulnerability...
CVE-2023-1033
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
CVE-2023-1033: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...
Froxlor Cross-Site Request Forgery Vulnerability
Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 2.0.11. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...
