CVE-2017-17055

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting XSS attack involving the username-form-id parameter to freeradius.users.php...

CVE-2017-17055: Improper Neutralization of Special Elements used in an OS Command

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting XSS attack involving the username-form-id parameter to freeradius.users.php...

PT-2017-14688

Name of the Vulnerable Software and Affected Versions Artica Web Proxy versions prior to 3.06.112911 Description The issue allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting XSS attack involving the username-form-id parameter to "freeradius.users.php" A...