Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/05/10 3:21 p.m.66 views

CVE-2024-34070 Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise

Froxlor is open source server administration software. Prior to 2.1.9, a Stored Blind Cross-Site Scripting XSS vulnerability was identified in the Failed Login Attempts Logging Feature of the Froxlor Application. An unauthenticated User can inject malicious scripts in the loginname parameter on t...

9.6CVSS8.1AI score0.00963EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2024/01/03 10:34 p.m.18 views

CVE-2023-50256 Froxlor username/surname AND company field Bypass

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

7.5CVSS7.7AI score0.00716EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/03 10:34 p.m.21 views

CVE-2023-50256 Froxlor username/surname AND company field Bypass

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

7.5CVSS7.4AI score0.00716EPSS
SaveExploits1References5
Rows per page
Query Builder