Articatech: >> Artica Proxy >> 4.28.030418 Security Vulnerabilities
An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.
CVSS Score
6.1
EPSS Score
0.258
Published
2020-07-15
Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.
CVSS Score
7.5
EPSS Score
0.918
Published
2020-06-22
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.
CVSS Score
9.8
EPSS Score
0.176
Published
2020-06-22