CVE-2021-42325

Description

Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.

Affected Platforms

Weakness Type

CWE-89

References

• http://packetstormsecurity.com/files/164800/Froxlor-0.10.29.1-SQL-Injection.html
• https://github.com/Froxlor/Froxlor/commit/eb592340b022298f62a0a3e8450dbfbe295857…
• https://www.exploit-db.com/exploits/50502
• http://packetstormsecurity.com/files/164800/Froxlor-0.10.29.1-SQL-Injection.html
• https://github.com/Froxlor/Froxlor/commit/eb592340b022298f62a0a3e8450dbfbe295857…
• https://www.exploit-db.com/exploits/50502