Lucene search
Veracode Vulnerability DatabaseVERACODE:39153HistoryFeb 07, 2023 - 10:31 a.m.
HTML Injection
2023-02-0710:31:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
html injection
froxlor
vulnerability
cronjobs.php
0.001 Low
EPSS
Percentile
20.1%
froxlor/froxlor is vulnerable to HTML Injection. The vulnerability is due to the Interval Time in the Dropdown Menu of the cronjob page, which doesn’t validate the input, allowing an attacker to change to time to a stored HTML Injection due to the update function in Cronjobs.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| froxlor/froxlor | le | 2.0.9 | |
| froxlor/froxlor | le | 2.0.9 |
Related
osv
osv
Froxlor contains Static Code Injection
2023-01-30 00:30:35
CVE-2023-0566
2023-01-29 22:15:08
nvd
nvd
CVE-2023-0566
2023-01-29 22:15:08
huntr
huntr
Dropdown Menu Manipulation leads to stored HTML Injection
2023-01-27 23:39:35
github
github
Froxlor contains Static Code Injection
2023-01-30 00:30:35
prion
prion
Cross site scripting
2023-01-29 22:15:00
cve
cve
CVE-2023-0566
2023-01-29 22:15:08
cvelist
cvelist