articatech artica proxy 4.30.000000 vulnerabilities and exploits

(subscribe to this query)

An issue exists in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php.

Articatech Artica Proxy 4.30.000000

1 Github repository

Artica Web Proxy 4.30.00000000 allows remote malicious user to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.

Articatech Web Proxy 4.30.000000

1 Github repository

Artica Web Proxy 4.30.000000 allows an authenticated remote malicious user to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via service_cmds_peform.

Articatech Web Proxy 4.30.000000

There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273) via the filename parameter to /cgi-bin/main.cgi.

Articatech Web Proxy 4.30.000000

Artica Proxy prior to 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.

Articatech Artica Proxy

1 Github repository

Artica Proxy prior to 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.

Articatech Artica Proxy

1 Github repository

An issue exists in Artica Proxy prior to 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.

Articatech Artica Proxy

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook