Lucene search

K
ArticatechArtica Proxy

11 matches found

CVE
CVE
added 2024/03/21 2:52 a.m.93 views

CVE-2024-2054

The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.

9.8CVSS9.9AI score0.82843EPSS
CVE
CVE
added 2024/03/21 2:52 a.m.62 views

CVE-2024-2053

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to prev...

7.5CVSS7.8AI score0.00377EPSS
CVE
CVE
added 2017/12/07 2:29 a.m.55 views

CVE-2017-17055

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.

9CVSS8.5AI score0.06083EPSS
CVE
CVE
added 2020/06/22 6:15 p.m.54 views

CVE-2020-13158

Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.

7.5CVSS7.6AI score0.91826EPSS
CVE
CVE
added 2020/03/22 8:15 p.m.50 views

CVE-2020-10818

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.

7.2CVSS8.3AI score0.07561EPSS
CVE
CVE
added 2022/08/24 1:15 p.m.45 views

CVE-2022-37153

An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php.

6.1CVSS6AI score0.09737EPSS
CVE
CVE
added 2020/07/15 9:15 p.m.40 views

CVE-2020-15051

An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.

6.1CVSS5.8AI score0.25842EPSS
CVE
CVE
added 2020/07/20 5:15 p.m.35 views

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields.

7.5CVSS8AI score0.09104EPSS
CVE
CVE
added 2020/06/22 6:15 p.m.32 views

CVE-2020-13159

Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.

10CVSS7.8AI score0.17647EPSS
CVE
CVE
added 2019/02/01 9:29 a.m.30 views

CVE-2019-7300

Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and ldap_password fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field.

9CVSS7.5AI score0.02722EPSS
CVE
CVE
added 2020/07/20 5:15 p.m.29 views

CVE-2020-15053

An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects.

6.1CVSS6AI score0.11797EPSS