Lucene search
+L

3 matches found

OSV
OSV
added 2024/01/04 5:20 p.m.41 views

GHSA-625G-FM5W-W7W4 Froxlor username/surname AND company field Bypass

Dear Sirs and Madams, I would like to report a business logic error vulnerability that I discovered during my recent penetration test on Froxlor. Specifically, I identified an issue where it was possible to submit the registration form with the essential fields, such as the username and password,...

7.5CVSS7.5AI score0.00716EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/01/03 10:34 p.m.22 views

CVE-2023-50256 Froxlor username/surname AND company field Bypass

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

7.5CVSS7.7AI score0.00716EPSS
SaveExploits1References3
CVE
CVE
added 2024/01/03 10:34 p.m.57 views

CVE-2023-50256

CVE-2023-50256 affects Froxlor open-source server administration software. Prior to version 2.1.2, the registration form allowed essential fields (e.g., username, password) to be submitted blank, bypassing mandatory field requirements such as surname and company name. This vulnerability could ena...

7.5CVSS7.4AI score0.00716EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder