agentprime: froxlor

agentprime: froxlorEvery new CVE for froxlor.https://agentprime.io/CVE-2026-121436: Froxlor 2.3.8 before 2.3.15 API Key Disclosure via api_keys.phphttps://agentprime.io/advisories/CVE-2026-121436/https://agentprime.io/advisories/CVE-2026-121436/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:28 GMTCVECVE-2026-121435: Froxlor before 2.3.15 Authorization Bypass via Mysqls.add APIhttps://agentprime.io/advisories/CVE-2026-121435/https://agentprime.io/advisories/CVE-2026-121435/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:27 GMTCVECVE-2026-121434: Froxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update APIhttps://agentprime.io/advisories/CVE-2026-121434/https://agentprime.io/advisories/CVE-2026-121434/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:27 GMTCVECVE-2026-113678: Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cronhttps://agentprime.io/advisories/CVE-2026-113678/https://agentprime.io/advisories/CVE-2026-113678/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:40:39 GMTCVEcriticalCVE-2026-113677: Froxlor 0.10.0 before 2.3.15 Missing Authorization via SubDomains.delete APIhttps://agentprime.io/advisories/CVE-2026-113677/https://agentprime.io/advisories/CVE-2026-113677/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:40:38 GMTCVECVE-2026-113676: Froxlor 0.10.0 before 2.3.15 Authorization Bypass via Admins.get APIhttps://agentprime.io/advisories/CVE-2026-113676/https://agentprime.io/advisories/CVE-2026-113676/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:40:38 GMTCVECVE-2026-109963: Froxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.phphttps://agentprime.io/advisories/CVE-2026-109963/https://agentprime.io/advisories/CVE-2026-109963/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:24 GMTCVECVE-2026-109962: Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs APIhttps://agentprime.io/advisories/CVE-2026-109962/https://agentprime.io/advisories/CVE-2026-109962/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:24 GMTCVECVE-2026-109961: Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_membershttps://agentprime.io/advisories/CVE-2026-109961/https://agentprime.io/advisories/CVE-2026-109961/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:23 GMTCVECVE-2026-109960: Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Valuehttps://agentprime.io/advisories/CVE-2026-109960/https://agentprime.io/advisories/CVE-2026-109960/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:22 GMTCVECVE-2026-100720: Froxlor before 2.3.12 Stored XSS via SSL certificate issuerhttps://agentprime.io/advisories/CVE-2026-100720/https://agentprime.io/advisories/CVE-2026-100720/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:10 GMTCVEcriticalCVE-2026-100719: Froxlor before 2.3.12 Credential Disclosure via DirProtections APIhttps://agentprime.io/advisories/CVE-2026-100719/https://agentprime.io/advisories/CVE-2026-100719/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:09 GMTCVECVE-2026-100718: Froxlor before 2.3.12 Authentication Bypass via EmailSender.addhttps://agentprime.io/advisories/CVE-2026-100718/https://agentprime.io/advisories/CVE-2026-100718/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:09 GMTCVECVE-2026-100717: froxlor before 2.3.12 CRLF Injection via validateUrl userinfohttps://agentprime.io/advisories/CVE-2026-100717/https://agentprime.io/advisories/CVE-2026-100717/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:08 GMTCVECVE-2026-100716: Froxlor before 2.3.12 Privilege Escalation via Symlinkhttps://agentprime.io/advisories/CVE-2026-100716/https://agentprime.io/advisories/CVE-2026-100716/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:07 GMTCVEcriticalCVE-2026-100715: Froxlor before 2.3.12 Arbitrary File Deletion via Symlinkhttps://agentprime.io/advisories/CVE-2026-100715/https://agentprime.io/advisories/CVE-2026-100715/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:07 GMTCVECVE-2026-100714: Froxlor before 2.3.12 Command Injection via letsencryptchallengepathhttps://agentprime.io/advisories/CVE-2026-100714/https://agentprime.io/advisories/CVE-2026-100714/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:06 GMTCVEcriticalCVE-2026-100713: Froxlor before 2.3.12 Privilege Escalation via SSH Key Synchttps://agentprime.io/advisories/CVE-2026-100713/https://agentprime.io/advisories/CVE-2026-100713/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:05 GMTCVECVE-2026-100712: froxlor before 2.3.12 Two-Factor Authentication Bypass via CSRFhttps://agentprime.io/advisories/CVE-2026-100712/https://agentprime.io/advisories/CVE-2026-100712/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:05 GMTCVECVE-2026-100711: froxlor before 2.3.12 Authentication Bypass via Session Persistencehttps://agentprime.io/advisories/CVE-2026-100711/https://agentprime.io/advisories/CVE-2026-100711/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:04 GMTCVECVE-2026-100710: Froxlor before 2.3.12 DKIM Private Key Disclosure via APIhttps://agentprime.io/advisories/CVE-2026-100710/https://agentprime.io/advisories/CVE-2026-100710/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:03 GMTCVECVE-2026-100709: Froxlor before 2.3.11 2FA Bypass via Namespace Confusionhttps://agentprime.io/advisories/CVE-2026-100709/https://agentprime.io/advisories/CVE-2026-100709/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:02 GMTCVECVE-2026-100708: Froxlor before 2.3.13 Private Key Disclosure via Certificates APIhttps://agentprime.io/advisories/CVE-2026-100708/https://agentprime.io/advisories/CVE-2026-100708/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:02 GMTCVECVE-2026-90937: froxlor before 2.2.5 nginx/Apache Configuration Injection via subdomain redirect URLhttps://agentprime.io/advisories/CVE-2026-90937/https://agentprime.io/advisories/CVE-2026-90937/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 12:48:31 GMTCVEcriticalCVE-2026-90767: Froxlor before 2.3.12 SSH Key Injection via authorized_keyshttps://agentprime.io/advisories/CVE-2026-90767/https://agentprime.io/advisories/CVE-2026-90767/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 10:45:37 GMTCVE