{"id":"CVE-2023-0315","published":"2023-01-16T00:00:00Z","modified":"2025-04-07T15:10:02Z","title":"Command Injection in froxlor/froxlor","vendor":"froxlor","product":"froxlor/froxlor","tier":"core","eol":null,"affectedVersions":[{"vendor":"froxlor","product":"froxlor/froxlor","versions":[">= unspecified, < 2.0.8"]}],"description":{"text":"Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.","provenance":"source","from":"CVE.org"},"summary":{"text":"Command injection exists in the froxlor/froxlor product (the froxlor web hosting control panel) in versions prior to 2.0.8, where special elements in input are not neutralised before being used in a system command. An attacker who has high-privilege authenticated access over the network, and no user interaction, can inject commands that the affected component executes, with potential for high confidentiality, integrity and availability impact.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:22Z"},"cvss":{"score":7.2,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.97653,"percentile":0.99903,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command"}],"references":[{"url":"https://huntr.dev/bounties/ff4e177b-ba48-4913-bbfa-ab8ce0db5943","tags":[]},{"url":"https://github.com/froxlor/froxlor/commit/090cfc26f2722ac3036cc7fd1861955bc36f065a","tags":[]},{"url":"http://packetstormsecurity.com/files/171108/Froxlor-2.0.6-Remote-Command-Execution.html","tags":[]},{"url":"http://packetstormsecurity.com/files/171729/Froxlor-2.0.3-Stable-Remote-Code-Execution.html","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Packagist","package":"froxlor/froxlor","vulnerableRanges":["<2.0.8"],"patched":["2.0.8"],"from":["GHSA-cp68-42pf-6627"],"provenance":"source"}],"advisories":[{"id":"GHSA-cp68-42pf-6627","url":"https://github.com/advisories/GHSA-cp68-42pf-6627","severity":"HIGH","ecosystem":"Packagist","package":"froxlor/froxlor","vulnerableRanges":["<2.0.8"],"patched":["2.0.8"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-0448","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-0448","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":51263,"url":"https://www.exploit-db.com/exploits/51263","title":"Froxlor 2.0.3 Stable - Remote Code Execution (RCE)","type":"webapps","platform":"php","date":"2023-04-05","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2023-04-05"},"pocGithub":{"count":1,"skipped":0,"earliest":"2023-01-29","earliestUrl":"https://github.com/mhaskar/CVE-2023-0315","repos":[{"name":"mhaskar/CVE-2023-0315","url":"https://github.com/mhaskar/CVE-2023-0315","stars":7,"created":"2023-01-29"}]},"metasploit":[{"name":"Froxlor Log Path RCE","module":"exploit/linux/http/froxlor_log_path_rce","type":"exploit","disclosureDate":"2023-01-29","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/froxlor_log_path_rce.rb"}],"first":{"date":"2023-01-29","source":"PoC-in-GitHub","url":"https://github.com/mhaskar/CVE-2023-0315"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/171108/Froxlor-2.0.6-Remote-Command-Execution.html","http://packetstormsecurity.com/files/171729/Froxlor-2.0.3-Stable-Remote-Code-Execution.html"],"flow":[],"timeline":[{"date":"2023-01-16","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-0315","provenance":"source"},{"date":"2023-01-29","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub; later: Metasploit 2023-01-29, Exploit-DB 2023-04-05","url":"https://github.com/mhaskar/CVE-2023-0315","provenance":"source"}],"speed":{"daysToPublicExploit":13,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":30.0,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.98,"detail":"percentile 0.9990"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 2 NVD exploit links; 1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.04,"detail":"base score 7.2"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-froxlor-froxlor-cve-2023-0315","children":[{"from":"CVE-2023-0315","to":"CVE-2023-2666","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["install/froxlor.sql.php","install/updates/froxlor/update_2.x.inc.php","lib/Froxlor/Froxlor.php","lng/de.lng.php","lng/en.lng.php"],"commits":["https://github.com/froxlor/froxlor/commit/090cfc26f2722ac3036cc7fd1861955bc36f065a","https://github.com/froxlor/froxlor/commit/1679675aa1c29d24344dd2e091ff252accb111d6"],"basis":"shared function","functions":["Froxlor"]}]},{"from":"CVE-2023-0315","to":"CVE-2024-34070","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["lib/Froxlor/FroxlorLogger.php"],"commits":["https://github.com/froxlor/froxlor/commit/090cfc26f2722ac3036cc7fd1861955bc36f065a","https://github.com/froxlor/Froxlor/commit/a862307bce5cdfb1c208b835f3e8faddd23046e6"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2022-4867","published":"2022-12-31","fixed":"2.0.0-beta1","kev":false},{"cve":"CVE-2022-4868","published":"2022-12-31","fixed":"2.0.0-beta1","kev":false},{"cve":"CVE-2023-0316","published":"2023-01-16","fixed":"2.0.0","kev":false,"link":{"from":"CVE-2023-0316","to":"CVE-2023-0315","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:froxlor/froxlor","fromFixed":"2.0.0","toFixed":"2.0.8","daysApart":0}]}},{"cve":"CVE-2023-0315","published":"2023-01-16","fixed":"2.0.8","kev":false},{"cve":"CVE-2023-0564","published":"2023-01-29","fixed":"2.0.10","kev":false},{"cve":"CVE-2023-0565","published":"2023-01-29","fixed":"2.0.10","kev":false},{"cve":"CVE-2023-0566","published":"2023-01-29","fixed":"2.0.10","kev":false}],"package":"Packagist:froxlor/froxlor"}}