Froxlor 跨站脚本漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site scripting vulnerability exists in versions of Froxlor prior to 0.10.39 that stems from command injection...

CVE-2022-3721 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

CVE-2022-3721 Code Injection in froxlor/froxlor

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

CVE-2022-3721: Improper Control of Generation of Code

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39...

Cross-Site Request Forgery (CSRF)

froxlor/froxlor is vulnerable to cross-site request forgery. The vulnerability exists due to the lack of security checks in the deleting api keys in apikeys.php, allowing an attacker to delete the api keys with the specified id by redirecting to the api key deletion endpoint through the GET reque...

Froxlor vulnerable to Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

GHSA-9XGP-3MXP-RV7X Froxlor vulnerable to Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

CVE-2022-3017

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

CVE-2022-3017

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

CVE-2022-3017 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

CVE-2022-3017

CVE-2022-3017 describes a Cross‑Site Request Forgery (CSRF) vulnerability in the Froxlor project (froxlor/froxlor) affecting versions prior to 0.10.38. The issue allows unauthorized actions to be performed in the authenticated context of Froxlor web applications. The available connected sources c...

CVE-2022-3017 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

PT-2022-20019 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 0.10.38 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. CSRF is an attack that tricks a user into performing unintended actions on a web application that...

Froxlor 跨站请求伪造漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 0.10.38. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

CVE-2022-3017: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

Froxlor SQL injection vulnerability

Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name...

GHSA-6FVW-X6GW-4WV8 Froxlor SQL injection vulnerability

Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name...

GHSA-P29C-JPGJ-V57R Froxlor arbitrary code execution via the database configuration options

An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of backupExistingDatabase in install/lib/class.FroxlorInstall.php...

Froxlor arbitrary code execution via the database configuration options

An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of backupExistingDatabase in install/lib/class.FroxlorInstall.php...