Vulnerability index

Browse CVEs

40 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Froxlor MEDIUM 5.4
CVE-2026-41233

Froxlor is open source server administration software. Prior to version 2.3.6, in `Domains.add()`, the `adminid` parameter is accepted from user inpu…

Fix: 2.3.6+
Fix from $1,600 2026-04-23
Froxlor MEDIUM 5.0
CVE-2026-41232

Froxlor is open source server administration software. Prior to version 2.3.6, in `EmailSender::add()`, the domain ownership validation for full emai…

Fix: 2.3.6+
Fix from $1,600 2026-04-23
Froxlor CRITICAL 9.9
CVE-2026-41228

Froxlor is open source server administration software. Prior to version 2.3.6, the Froxlor API endpoint `Customers.update` (and `Admins.update`) does…

Fix: 2.3.6+
Fix from $2,300 2026-04-23
Froxlor CRITICAL 9.1
CVE-2026-41229

Froxlor is open source server administration software. Prior to version 2.3.6, `PhpHelper::parseArrayToString()` writes string values into single-quo…

Fix: 2.3.6+
Fix from $2,300 2026-04-23
Froxlor HIGH 8.5
CVE-2026-41230

Froxlor is open source server administration software. Prior to version 2.3.6, `DomainZones::add()` accepts arbitrary DNS record types without a whit…

Fix: 2.3.6+
Fix from $1,950 2026-04-23
Froxlor HIGH 7.5
CVE-2026-41231

Froxlor is open source server administration software. Prior to version 2.3.6, `DataDump.add()` constructs the export destination path from user-supp…

Fix: 2.3.6+
Fix from $1,950 2026-04-23
Froxlor HIGH 8.8
CVE-2026-30932

Froxlor is open source server administration software. Prior to version 2.3.5, the DomainZones.add API endpoint (accessible to customers with DNS ena…

Fix: 2.3.5+
Fix from $1,950 2026-03-24
Froxlor CRITICAL 9.1
CVE-2026-26279

Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== instead of =) completely disable…

Fix: 2.3.4+
Fix from $2,300 2026-03-03
Froxlor MEDIUM 5.4
CVE-2025-48958

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows …

Fix: 2.2.6+
Fix from $1,600 2025-06-02
Froxlor HIGH 7.8
CVE-2025-29773

Froxlor is open-source server administration software. A vulnerability in versions prior to 2.2.6 allows users (such as resellers or customers) to cr…

Patch available
Fix from $1,950 2025-03-13
Froxlor HIGH 7.5
CVE-2023-50256

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fie…

Fix: 2.1.2+
Fix from $1,950 2024-01-03
Froxlor HIGH 8.8
CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.

Fix: 2.1.0+
Fix from $1,950 2023-11-10
Froxlor MEDIUM 5.4
CVE-2023-4829

Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22.

Fix: 2.0.22+
Fix from $1,600 2023-10-13
Froxlor HIGH 7.2
CVE-2023-3668

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21.

Fix: 2.0.21+
Fix from $1,950 2023-07-14
Froxlor MEDIUM 5.4
CVE-2023-3192

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0.

Fix: 2.1.0+
Fix from $1,600 2023-06-11
Froxlor CRITICAL 9.8
CVE-2023-3173

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20.

Fix: 2.0.20+
Fix from $2,300 2023-06-09
Froxlor HIGH 7.2
CVE-2023-3172

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.

Fix: 2.0.20+
Fix from $1,950 2023-06-09
Froxlor HIGH 7.5
CVE-2023-2666

Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16.

Fix: 2.0.16+
Fix from $1,950 2023-05-12
Froxlor HIGH 8.8
CVE-2023-2034EPSS 73%

Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14.

Fix: 2.0.14+
Fix from $1,950 2023-04-14
Froxlor CRITICAL 9.8
CVE-2023-1307

Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.

Fix: 2.0.13+
Fix from $2,300 2023-03-10
Froxlor HIGH 8.8
CVE-2023-1033

Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.

Fix: 2.0.11+
Fix from $1,950 2023-02-25
Froxlor HIGH 8.8
CVE-2023-0877

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.

Fix: 2.0.11+
Fix from $1,950 2023-02-17
Froxlor HIGH 8.8
CVE-2023-0671

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.

Fix: 2.0.10+
Fix from $1,950 2023-02-04
Froxlor MEDIUM 5.3
CVE-2023-0572

Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.

Fix: 2.0.10+
Fix from $1,600 2023-01-29
Froxlor HIGH 7.5
CVE-2023-0564

Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.

Fix: 2.0.10+
Fix from $1,950 2023-01-29
Froxlor MEDIUM 5.5
CVE-2023-0316

Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0.

Fix: 2.0.0+
Fix from $1,600 2023-01-16
Froxlor HIGH 8.8
CVE-2023-0315EPSS 98%

Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.

Fix: 2.0.8+
Fix from $1,950 2023-01-16
Froxlor MEDIUM 5.4
CVE-2022-4864

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.

Fix: after 0.10.38.3
Fix from $1,600 2022-12-30
Froxlor MEDIUM 6.1
CVE-2022-3869

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.

Fix: 0.10.38.2+
Fix from $1,600 2022-11-05
Froxlor MEDIUM 6.5
CVE-2022-3017

Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38.

Fix: 0.10.38+
Fix from $1,600 2022-08-28