CVE-2026-66745: Improper Control of Generation of Code

Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...

CVE-2022-37153

An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...

Artica Proxy 跨站脚本漏洞

Artica Proxy is an open source Artica proxy solution from French company Artica. A cross-site scripting vulnerability exists in Artica Proxy version 4.30.0000, which stems from an XSS vulnerability in the password parameter in /fw.login.php...

CVE-2022-37153: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...

PT-2022-23843 · Unknown · Artica Proxy

Name of the Vulnerable Software and Affected Versions: Artica Proxy version 4.30.000000 Description: An issue was discovered in Artica Proxy. There is a XSS vulnerability via the password parameter in "/fw.login.php". Recommendations: For Artica Proxy version 4.30.000000, avoid using the password...

CVE-2020-17506: Improper Neutralization of Special Elements used in an SQL Command

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php...