Vulnerabilidades em Froxlor
77 resultadosAnálise Vexday
Froxlor apresenta um perfil de risco baixo com apenas 2 vulnerabilidades registradas na base, nenhuma delas em exploração ativa ou crítica. A fraqueza dominante é relacionada a validação inadequada de entrada (CWE-20), mas sem evidência de atividade recente de ataque ou novas publicações nos últimos 90 dias.
CVE-2026-41233MEDIUMFroxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add()EPSS 0.3%CVE-2026-55593MEDIUMFroxlor: CSRF Vulnerability in Froxlor AJAX Endpoint — Missing Cross-Site Request Forgery ProtectionEPSS 0.3%CVE-2026-109963MEDIUMFroxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.phpEPSS 0.3%CVE-2026-109962MEDIUMFroxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs APIEPSS 0.3%CVE-2026-100710MEDIUMFroxlor before 2.3.12 DKIM Private Key Disclosure via APIEPSS 0.2%CVE-2026-100719HIGHFroxlor before 2.3.12 Credential Disclosure via DirProtections APIEPSS 0.2%CVE-2026-41232MEDIUMFroxlor has an Email Sender Alias Domain Ownership Bypass via Wrong Array Index that Allows Cross-Customer Email SpoofingEPSS 0.2%CVE-2026-41235HIGHFroxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcementEPSS 0.2%CVE-2026-109961HIGHFroxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_membersEPSS 0.2%CVE-2026-100720CRITICALFroxlor before 2.3.12 Stored XSS via SSL certificate issuerEPSS 0.2%CVE-2026-100718HIGHFroxlor before 2.3.12 Authentication Bypass via EmailSender.addEPSS 0.2%CVE-2026-121435MEDIUMFroxlor before 2.3.15 Authorization Bypass via Mysqls.add APIEPSS 0.2%CVE-2026-100708HIGHFroxlor before 2.3.13 Private Key Disclosure via Certificates APIEPSS 0.2%CVE-2026-121434MEDIUMFroxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update APIEPSS 0.2%CVE-2026-100713HIGHFroxlor before 2.3.12 Privilege Escalation via SSH Key SyncEPSS 0.2%CVE-2024-58383HIGHFroxlor before 2.2.0 Insecure File Permissions mysql.confEPSS 0.2%CVE-2026-100712HIGHfroxlor before 2.3.12 Two-Factor Authentication Bypass via CSRFEPSS 0.1%