Froxlor 漏洞列表

HTML Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.

HTML Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.

Froxlor Server Management backup file was detected.

Detects the Froxlor Server Management Panel installation page.

Froxlor Server Management is susceptible to cross-site scripting via clicking the forgot password link. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

froxlor是一个服务器管理软件面板，在github上有1.5k的start，该面板登陆页面存在html注入