Lucene search
Veracode Vulnerability DatabaseVERACODE:22658HistoryMar 10, 2020 - 1:33 a.m.
Arbitrary Code Execution
2020-03-1001:33:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.005 Low
EPSS
Percentile
77.1%
froxlor/froxlor is vulnerable to arbitrary code execution. The _backupExistingDatabase in install/lib/class.FroxlorInstall.php allows remote attackers with access to the installation routine to execute arbitrary code due to the unescaped database configuration options being passed to exec.
| CPE | Name | Operator | Version |
|---|---|---|---|
| froxlor/froxlor | le | 0.10.13 |
Related
cve
cve
CVE-2020-10235
2020-03-09 16:15:12
nvd
nvd
CVE-2020-10235
2020-03-09 16:15:12
osv
osv
CVE-2020-10235
2020-03-09 16:15:12
Froxlor arbitrary code execution via the database configuration options
2022-05-24 17:10:26
prion
prion
Code injection
2020-03-09 16:15:00
cvelist
cvelist
CVE-2020-10235
2020-03-09 15:04:46
github
github
Froxlor arbitrary code execution via the database configuration options
2022-05-24 17:10:26