Froxlor

froxlor

47 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Froxlor

froxlor

47 CVEs

CVEs (47)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-2034 1Froxlor 1Froxlor Jun 17, 2026 Apr 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14.
CVE-2023-1307 1Froxlor 1Froxlor Jun 17, 2026 Mar 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.
CVE-2023-1033 1Froxlor 1Froxlor Jun 17, 2026 Feb 25, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.
CVE-2023-0877 1Froxlor 1Froxlor Jun 17, 2026 Feb 17, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.
CVE-2023-0671 1Froxlor 1Froxlor Jun 17, 2026 Feb 4, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-0572 1Froxlor 1Froxlor Jun 17, 2026 Jan 29, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-0566 1Froxlor 1Froxlor Jun 17, 2026 Jan 29, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.
CVE-2023-0565 1Froxlor 1Froxlor Jun 17, 2026 Jan 29, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-0564 1Froxlor 1Froxlor Jun 17, 2026 Jan 29, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-0316 1Froxlor 1Froxlor Jun 17, 2026 Jan 16, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0.
CVE-2023-0315 1Froxlor 1Froxlor Jun 17, 2026 Jan 16, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.
CVE-2022-4868 1Froxlor 1Froxlor Jun 17, 2026 Dec 31, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
CVE-2022-4867 1Froxlor 1Froxlor Jun 17, 2026 Dec 31, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
CVE-2022-4864 1Froxlor 1Froxlor Jun 17, 2026 Dec 30, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
CVE-2022-3869 1Froxlor 1Froxlor Jun 17, 2026 Nov 5, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.
CVE-2022-3721 1Froxlor 1Froxlor Jun 17, 2026 Nov 4, 2022 N/A· v4 4.6 MEDIUM· v3 N/A· v2 Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39.
CVE-2022-3017 1Froxlor 1Froxlor Jun 17, 2026 Aug 28, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38.
CVE-2020-29653 1Froxlor 1Froxlor Jun 17, 2026 Apr 13, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of this parameter is reflected in the login webpage, allowing the injection of arbitrary HTML tags.
CVE-2020-28957 1Froxlor 1Froxlor Jun 17, 2026 Oct 22, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Multiple cross-site scripting (XSS) vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or usern...Show more Multiple cross-site scripting (XSS) vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields.Show less
CVE-2021-42325 1Froxlor 1Froxlor Jun 17, 2026 Oct 12, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.

Previous 123 Next