CVE-2026-41229

Froxlor is open source server administration software. Prior to version 2.3.6, "PhpHelper::parseArrayToString" writes string values into single-quoted PHP string literals without escaping single quotes. When an admin with "changeserversettings" permission adds or updates a MySQL server via the AP...

CVE-2026-41229: Improper Control of Generation of Code

Froxlor is open source server administration software. Prior to version 2.3.6, PhpHelper::parseArrayToString writes string values into single-quoted PHP string literals without escaping single quotes. When an admin with changeserversettings permission adds or updates a MySQL server via the API, t...

PT-2026-35184

Summary PhpHelper::parseArrayToString writes string values into single-quoted PHP string literals without escaping single quotes. When an admin with change serversettings permission adds or updates a MySQL server via the API, the privileged user parameter which has no input validation is written...