froxlor/froxlor
The server administration software for your needs. Developed by experienced server administrators, this panel simplifies the effort of managing your hosting platform.
Security Advisories for froxlor/froxlor in packagist
Critical
about 2 months ago
Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints
packagist
froxlor/froxlor
Moderate
about 2 months ago
Froxlor has CSRF Vulnerability in AJAX Endpoint — Missing Cross-Site Request Forgery Protection
packagist
froxlor/froxlor
Moderate
about 2 months ago
Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields
packagist
froxlor/froxlor
High
about 2 months ago
Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
packagist
froxlor/froxlor
High
about 2 months ago
Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover
packagist
froxlor/froxlor
Moderate
3 months ago
Froxlor customer can create MySQL databases on disallowed servers via Mysqls.add API
packagist
froxlor/froxlor
Moderate
3 months ago
Froxlor: Authenticated customers can read other customers' allowed sender aliases
packagist
froxlor/froxlor
High
4 months ago
Froxlor's API Authentication bypasses 2FA Authentication
packagist
froxlor/froxlor
High
4 months ago
Froxlor: BIND Zone File Injection via TXT Record Content
packagist
froxlor/froxlor
High
5 months ago
Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path
packagist
froxlor/froxlor
High
5 months ago
Froxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcement
packagist
froxlor/froxlor
Critical
6 months ago
Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution
packagist
froxlor/froxlor
Critical
6 months ago
Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API)
packagist
froxlor/froxlor
High
6 months ago
Froxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add()
packagist
froxlor/froxlor
High
6 months ago
Froxlor has Incomplete Symlink Validation in DataDump.add() Allows Arbitrary Directory Ownership Takeover via Cron
packagist
froxlor/froxlor
Moderate
6 months ago
Froxlor has an Email Sender Alias Domain Ownership Bypass via Wrong Array Index Allows Cross-Customer Email Spoofing
packagist
froxlor/froxlor
Moderate
6 months ago
Froxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add()
packagist
froxlor/froxlor
High
7 months ago
Froxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API
packagist
froxlor/froxlor
Critical
7 months ago
Froxlor has Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection
packagist
froxlor/froxlor
Moderate
over 1 year ago
Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover
packagist
froxlor/froxlor
High
about 2 years ago
Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>
packagist
froxlor/froxlor
Critical
over 2 years ago
Blind XSS Leading to Froxlor Application Compromise
packagist
froxlor/froxlor
Critical
almost 3 years ago
Froxlor Improper Input Validation vulnerability
packagist
froxlor/froxlor
Critical
over 3 years ago
Froxlor vulnerable to Improper Encoding or Escaping of Output
packagist
froxlor/froxlor
Critical
over 3 years ago
Froxlor vulnerable to Improper Restriction of Excessive Authentication Attempts
packagist
froxlor/froxlor
Moderate
over 3 years ago
Froxlor vulnerable to Allocation of Resources Without Limits or Throttling
packagist
froxlor/froxlor
Critical
over 3 years ago
froxlor/froxlor vulnerable to unrestricted upload of file with dangerous type
packagist
froxlor/froxlor
High
over 3 years ago
froxlor is vulnerable to privilege escalation from customer to root via directory-options
packagist
froxlor/froxlor
Moderate
almost 4 years ago
Froxlor vulnerable to Cross-Site Request Forgery
packagist
froxlor/froxlor
Moderate
about 4 years ago
Froxlor vulnerable to Cross-Site Request Forgery (CSRF)
packagist
froxlor/froxlor
High
over 4 years ago
Froxlor arbitrary code execution via the database configuration options
packagist
froxlor/froxlor
Moderate
over 4 years ago
Froxlor Exposure of Sensitive Information to an Unauthorized Actor
packagist
froxlor/froxlor