Skip to content
OpenAdvisories

Package · Packagist

froxlor/froxlor

60 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.7
    CVE-2024-34070 Public exploit

    Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise

    Froxlor is open source server administration software. Prior to 2.1.9, a Stored Blind Cross-Site Scripting (XSS) vulnerability was identified in the Failed Login Attempts Logging Feature of the Froxlor Application. An unauthenticated User can inject malicious…

  • High 7.2
    CVE-2023-0315 Public exploit EPSS 98%

    Command Injection in froxlor/froxlor

    Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.

  • Critical 9.8
    CVE-2021-42325 Public exploit EPSS 12%

    Froxlor SQL injection vulnerability

    Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.