Browse CVEs

MEDIUM 5.4 CVE-2026-41233 Froxlor is open source server administration software. Prior to version 2.3.6, in `Domains.add()`, the `adminid` parameter is accepted from user inpu… Froxlor 2.3.6+ Fix from $1,6002026-04-23 MEDIUM 5.0 CVE-2026-41232 Froxlor is open source server administration software. Prior to version 2.3.6, in `EmailSender::add()`, the domain ownership validation for full emai… Froxlor 2.3.6+ Fix from $1,6002026-04-23 CRITICAL 9.9 CVE-2026-41228 Froxlor is open source server administration software. Prior to version 2.3.6, the Froxlor API endpoint `Customers.update` (and `Admins.update`) does… Froxlor 2.3.6+ Fix from $2,3002026-04-23 CRITICAL 9.1 CVE-2026-41229 Froxlor is open source server administration software. Prior to version 2.3.6, `PhpHelper::parseArrayToString()` writes string values into single-quo… Froxlor 2.3.6+ Fix from $2,3002026-04-23 HIGH 8.5 CVE-2026-41230 Froxlor is open source server administration software. Prior to version 2.3.6, `DomainZones::add()` accepts arbitrary DNS record types without a whit… Froxlor 2.3.6+ Fix from $1,9502026-04-23 HIGH 7.5 CVE-2026-41231 Froxlor is open source server administration software. Prior to version 2.3.6, `DataDump.add()` constructs the export destination path from user-supp… Froxlor 2.3.6+ Fix from $1,9502026-04-23 HIGH 8.8 CVE-2026-30932 Froxlor is open source server administration software. Prior to version 2.3.5, the DomainZones.add API endpoint (accessible to customers with DNS ena… Froxlor 2.3.5+ Fix from $1,9502026-03-24 CRITICAL 9.1 CVE-2026-26279 Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== instead of =) completely disable… Froxlor 2.3.4+ Fix from $2,3002026-03-03 MEDIUM 5.4 CVE-2025-48958 Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows … Froxlor 2.2.6+ Fix from $1,6002025-06-02 HIGH 7.8 CVE-2025-29773 Froxlor is open-source server administration software. A vulnerability in versions prior to 2.2.6 allows users (such as resellers or customers) to cr… Froxlor Patch available Fix from $1,9502025-03-13 HIGH 7.5 CVE-2023-50256 Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fie… Froxlor 2.1.2+ Fix from $1,9502024-01-03 HIGH 8.8 CVE-2023-6069 Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0. Froxlor 2.1.0+ Fix from $1,9502023-11-10 MEDIUM 5.4 CVE-2023-4829 Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22. Froxlor 2.0.22+ Fix from $1,6002023-10-13 HIGH 7.2 CVE-2023-3668 Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21. Froxlor 2.0.21+ Fix from $1,9502023-07-14 MEDIUM 5.4 CVE-2023-3192 Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0. Froxlor 2.1.0+ Fix from $1,6002023-06-11 CRITICAL 9.8 CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20. Froxlor 2.0.20+ Fix from $2,3002023-06-09 HIGH 7.2 CVE-2023-3172 Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20. Froxlor 2.0.20+ Fix from $1,9502023-06-09 HIGH 7.5 CVE-2023-2666 Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16. Froxlor 2.0.16+ Fix from $1,9502023-05-12 HIGH 8.8 CVE-2023-2034EPSS 73% Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14. Froxlor 2.0.14+ Fix from $1,9502023-04-14 CRITICAL 9.8 CVE-2023-1307 Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13. Froxlor 2.0.13+ Fix from $2,3002023-03-10 HIGH 8.8 CVE-2023-1033 Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11. Froxlor 2.0.11+ Fix from $1,9502023-02-25 HIGH 8.8 CVE-2023-0877 Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11. Froxlor 2.0.11+ Fix from $1,9502023-02-17 HIGH 8.8 CVE-2023-0671 Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10. Froxlor 2.0.10+ Fix from $1,9502023-02-04 MEDIUM 5.3 CVE-2023-0572 Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10. Froxlor 2.0.10+ Fix from $1,6002023-01-29 HIGH 7.5 CVE-2023-0564 Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10. Froxlor 2.0.10+ Fix from $1,9502023-01-29 MEDIUM 5.5 CVE-2023-0316 Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0. Froxlor 2.0.0+ Fix from $1,6002023-01-16 HIGH 8.8 CVE-2023-0315EPSS 98% Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8. Froxlor 2.0.8+ Fix from $1,9502023-01-16 MEDIUM 5.4 CVE-2022-4864 Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1. Froxlor after 0.10.38.3 Fix from $1,6002022-12-30 MEDIUM 6.1 CVE-2022-3869 Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2. Froxlor 0.10.38.2+ Fix from $1,6002022-11-05 MEDIUM 6.5 CVE-2022-3017 Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38. Froxlor 0.10.38+ Fix from $1,6002022-08-28