CVE-2020-36978

Impact

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://froxlor.org/
• https://froxlor.org/download/
• https://www.exploit-db.com/exploits/49063
• https://www.vulncheck.com/advisories/froxlor-froxlor-server-management-panel-persistent-cross-site-scripting
• https://www.vulnerability-lab.com/get_content.php?id=2241
• https://www.vulnerability-lab.com/show.php?user=Benjamin%20K.M.
• https://www.vulnerability-lab.com/show.php?user=Vulnerability-Lab
• https://www.exploit-db.com/exploits/49063