Froxlor vulnerable to Command Injection

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-0315 · ADVISORY
• froxlor/froxlor commit 090cfc2 · WEB
• Froxlor/Froxlor · PACKAGE
• huntr.dev/bounties/ff4e177b-ba48-4913-bbfa-ab8ce0db5943 · WEB
• packetstormsecurity.com/files/171108/Froxlor-2.0.6-Remote-Command-Execution.html · WEB
• packetstormsecurity.com/files/171729/Froxlor-2.0.3-Stable-Remote-Code-Execution.html · WEB

Lỗ hổng khác của froxlor/froxlor

• CVE-2026-90936TRUNG BÌNH 4.3Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can…
• CVE-2026-90935TRUNG BÌNH 4.3Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysqlserver allowlist in the Mysqls.add API c…
• CVE-2024-58383CAO 7.3Froxlor before 2.2.0 (affected up to and including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuratio…
• CVE-2026-62988NGHIÊM TRỌNG 9.0Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.list…
• CVE-2026-55593TRUNG BÌNH 6.5Froxlor is open source server administration software. Prior to 2.3.8, the standalone lib/ajax.php entry point bypasses the centralized requ…