Vendor
Froxlor
84 known vulnerabilities in products by Froxlor, 0 of them actively exploited (CISA KEV).
Key figures
84
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
22
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-2034 | Unrestricted Upload of File with Dangerous Type in froxlor/froxlor | 9.1 | |
| Critical | CVE-2021-42325 | Froxlor: SQL Injection | 9.8 | |
| High | CVE-2023-0315 | Command Injection in froxlor/froxlor | 7.2 | |
| Critical | CVE-2023-0877 | Code Injection in froxlor/froxlor | 9.1 | |
| Critical | CVE-2015-5959 | Froxlor: security vulnerability | 9.8 | |
| Critical | CVE-2016-5100 | Froxlor: security vulnerability | 9.8 | |
| Critical | CVE-2026-113678 | Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron | 9.9 | |
| High | CVE-2018-1000527 | Froxlor: Information Disclosure | 7.2 | |
| Critical | CVE-2026-100714 | Froxlor before 2.3.12 Command Injection via letsencryptchallengepath | 9.1 | |
| High | CVE-2020-10235 | Froxlor: security vulnerability | 8.8 | |
| Critical | CVE-2026-100716 | Froxlor before 2.3.12 Privilege Escalation via Symlink | 9.9 | |
| Critical | CVE-2026-26279 | Froxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection | 9.1 | |
| Critical | CVE-2026-100715 | Froxlor before 2.3.12 Arbitrary File Deletion via Symlink | 9.6 | |
| Critical | CVE-2026-62988 | Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints | 9.0 | |
| Critical | CVE-2026-90937 | froxlor before 2.2.5 nginx/Apache Configuration Injection via subdomain redirect URL | 9.9 | |
| Critical | CVE-2023-3173 | Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor | 9.8 | |
| Critical | CVE-2023-0671 | Code Injection in froxlor/froxlor | 9.9 | |
| Critical | CVE-2023-1307 | Authentication Bypass by Primary Weakness in froxlor/froxlor | 9.8 | |
| Critical | CVE-2024-34070 | Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise | 9.7 | |
| Critical | CVE-2026-41228 | Froxlor: PHP Remote File Inclusion | 10.0 | |
| Critical | CVE-2026-100717 | froxlor before 2.3.12 CRLF Injection via validateUrl userinfo | 9.9 | |
| High | CVE-2026-54348 | Froxlor: SQL Injection | 7.2 | |
| Critical | CVE-2023-3668 | Improper Encoding or Escaping of Output in froxlor/froxlor | 9.1 | |
| Critical | CVE-2023-6069 | Improper Link Resolution Before File Access in froxlor/froxlor | 9.9 | |
| High | CVE-2018-12642 | Froxlor: Improper Access Control | 7.5 |
News
Products
| Froxlor | 83 | 0 |
| Froxlor/froxlor | 26 | 0 |