Description (CNA)
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Froxlor / Froxlor Froxlor Server Management Panel | affected 0.10.16 |
CWE
CWE-79
References
- https://www.exploit-db.com/exploits/49063
- https://froxlor.org/
- https://froxlor.org/download/
- https://www.vulnerability-lab.com/get_content.php?id=2241
- https://www.vulnerability-lab.com/show.php?user=Vulnerability-Lab
- https://www.vulnerability-lab.com/show.php?user=Benjamin%20K.M.
- https://www.vulncheck.com/advisories/froxlor-froxlor-server-management-panel-persistent-cross-site-scripting
ADP enrichment
No English description supplied.