Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

froxlor Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-90767`Froxlor before 2.3.12 SSH Key Injection via authorized_keys	Exploitation statusNot confirmed	FixYes	Affected productFroxlor	Published09/13/2026	SeverityHigh
`CVE-2026-55593`Froxlor: CSRF Vulnerability in Froxlor AJAX Endpoint — Missing Cross-Site Request Forgery Protection	Exploitation statusNot known exploited	FixYes	Affected productFroxlor	Published08/18/2026	SeverityMedium
`CVE-2026-54347`Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover	Exploitation statusNot known exploited	FixYes	Affected productFroxlor	Published08/18/2026	SeverityHigh
`CVE-2026-54348`Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration	Exploitation statusPublic exploit	FixYes	Affected productFroxlor	Published08/18/2026	SeverityHigh
`CVE-2026-54543`Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields	Exploitation statusNot known exploited	FixYes	Affected productFroxlor	Published08/18/2026	SeverityMedium
`CVE-2026-62988`Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints	Exploitation statusPublic exploit	FixYes	Affected productFroxlor	Published08/18/2026	SeverityCritical
`CVE-2026-52793`Froxlor: API Authentication bypasses 2FA Authentication	Exploitation statusPublic exploit	FixYes	Affected productFroxlor	Published08/18/2026	SeverityHigh
`CVE-2026-41237`Froxlor has an incomplete fix for CVE-2026-30932	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published06/04/2026	SeverityHigh
`CVE-2026-41236`Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published06/04/2026	SeverityHigh
`CVE-2026-41235`Froxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcement	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published06/04/2026	SeverityHigh
`CVE-2026-41234`Froxlor: BIND Zone File Injection via TXT Record Content	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published06/04/2026	SeverityHigh
`CVE-2026-41233`Froxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add()	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published04/23/2026	SeverityMedium
`CVE-2026-41232`Froxlor has an Email Sender Alias Domain Ownership Bypass via Wrong Array Index that Allows Cross-Customer Email Spoofing	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published04/23/2026	SeverityMedium
`CVE-2026-41231`Froxlor has Incomplete Symlink Validation in DataDump.add() that Allows Arbitrary Directory Ownership Takeover via Cron	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published04/23/2026	SeverityHigh
`CVE-2026-41230`Froxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add()	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published04/23/2026	SeverityHigh
`CVE-2026-41229`Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API)	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published04/23/2026	SeverityCritical
`CVE-2026-41228`Froxlor has Local File Inclusion via path traversal in API `def_language` parameter that leads to Remote Code Execution	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published04/23/2026	SeverityCritical
`CVE-2026-30932`Froxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API	Exploitation statusPublic exploit	FixYes	Affected productFroxlor	Published03/24/2026	SeverityHigh
`CVE-2026-26279`Froxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection	Exploitation statusNot known exploited	FixYes	Affected productFroxlor	Published03/03/2026	SeverityCritical
`CVE-2020-36978`Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor Froxlor Server Management Panel	Published01/27/2026	SeverityMedium
`CVE-2025-48958`Froxlor has an HTML Injection Vulnerability	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published06/02/2025	SeverityMedium
`CVE-2025-29773`Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover	Exploitation statusPublic exploit	FixNot confirmed	Affected productFroxlor	Published03/13/2025	SeverityMedium
`CVE-2024-34070`Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise	Exploitation statusPublic exploit	FixYes	Affected productFroxlor	Published05/10/2024	SeverityCritical
`CVE-2023-50256`Froxlor username/surname AND company field Bypass	Exploitation statusNot known exploited	FixNot confirmed	Affected productFroxlor	Published01/03/2024	SeverityHigh
`CVE-2023-6069`Improper Link Resolution Before File Access in froxlor/froxlor	Exploitation statusNot confirmed	FixYes	Affected productfroxlor/froxlor	Published11/10/2023	SeverityCritical
`CVE-2023-4829`Cross-site Scripting (XSS) - Stored in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published10/13/2023	SeverityMedium
`CVE-2023-5564`Cross-site Scripting (XSS) - Stored in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published10/13/2023	SeverityMedium
`CVE-2023-4304`Business Logic Errors in froxlor/froxlor	Exploitation statusNot known exploited	FixYes	Affected productfroxlor/froxlor	Published08/11/2023	SeverityLow
`CVE-2023-3668`Improper Encoding or Escaping of Output in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published07/14/2023	SeverityCritical
`CVE-2023-3192`Session Fixation in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published06/11/2023	SeverityMedium
`CVE-2023-3173`Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published06/09/2023	SeverityCritical
`CVE-2023-3172`Path Traversal in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published06/09/2023	SeverityMedium
`CVE-2023-2666`Allocation of Resources Without Limits or Throttling in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published05/12/2023	SeverityMedium
`CVE-2023-2034`Unrestricted Upload of File with Dangerous Type in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published04/14/2023	SeverityCritical
`CVE-2023-1307`Authentication Bypass by Primary Weakness in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published03/10/2023	SeverityCritical
`CVE-2023-1033`Cross-Site Request Forgery (CSRF) in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published02/25/2023	SeverityMedium
`CVE-2023-0877`Code Injection in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published02/17/2023	SeverityCritical
`CVE-2023-0671`Code Injection in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published02/04/2023	SeverityCritical
`CVE-2023-0564`Weak Password Requirements in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published01/29/2023	SeverityMedium
`CVE-2023-0566`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published01/29/2023	SeverityMedium
`CVE-2023-0572`Unchecked Error Condition in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published01/29/2023	SeverityMedium
`CVE-2023-0565`Business Logic Errors in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published01/29/2023	SeverityMedium
`CVE-2023-0316`Path Traversal: '\..\filename' in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published01/16/2023	SeverityMedium
`CVE-2023-0315`Command Injection in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published01/16/2023	SeverityHigh
`CVE-2022-4868`Improper Authorization in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published12/31/2022	SeverityMedium
`CVE-2022-4867`Cross-Site Request Forgery (CSRF) in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published12/31/2022	SeverityLow
`CVE-2022-4864`Argument Injection in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published12/30/2022	SeverityMedium
`CVE-2022-3869`Code Injection in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published11/05/2022	SeverityMedium
`CVE-2022-3721`Code Injection in froxlor/froxlor	Exploitation statusPublic exploit	FixYes	Affected productfroxlor/froxlor	Published11/04/2022	SeverityHigh
`CVE-2022-3017`Cross-Site Request Forgery (CSRF) in froxlor/froxlor	Exploitation statusNot confirmed	FixYes	Affected productfroxlor/froxlor	Published08/28/2022	SeverityMedium
`CVE-2020-29653`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/13/2022	SeverityUnknown
`CVE-2020-28957`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/22/2021	SeverityUnknown
`CVE-2021-42325`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/12/2021	SeverityUnknown
`CVE-2020-10235`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/09/2020	SeverityUnknown
`CVE-2020-10237`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/09/2020	SeverityUnknown
`CVE-2020-10236`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/09/2020	SeverityUnknown
`CVE-2018-1000527`	Exploitation statusNot confirmed	FixYes	Affected productNot confirmed	Published06/26/2018	SeverityUnknown
`CVE-2018-12642`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published06/22/2018	SeverityUnknown
`CVE-2015-5959`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/06/2017	SeverityUnknown
`CVE-2016-5100`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published02/13/2017	SeverityUnknown

60 / 60 Results

All vulnerabilities loaded

Security vulnerabilities from froxlor

froxlor

How many security vulnerabilities does froxlor have?

Which froxlor product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular froxlor products

froxlor/froxlor

Froxlor

Froxlor Froxlor Server Management Panel