CVE-2020-10235

An issue was discovered in Froxlor before 0.10.14

published March 9, 2020

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of _backupExistingDatabase in install/lib/class.FroxlorInstall.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01682 · 76.8th percentile
Published
2020-03-09T15:04Z
EPSS history
Timeline
  • 09 MAR 15:04Z
    An issue was discovered in Froxlor before 0.10.14
    cvelistv5