High severity7.2NVD Advisory· Published Jun 26, 2018· Updated Jun 17, 2026
CVE-2018-1000527
CVE-2018-1000527
Description
Froxlor version <= 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $_POST['ssl_ipandport']. This vulnerability appears to have been fixed in after commit c1e62e6.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
froxlor/froxlorPackagist | < 0.9.40 | 0.9.40 |
Affected products
1Patches
Vulnerability mechanics
References
6- 0dd.zone/2018/05/31/Froxlor-Object-Injection/nvdThird Party Advisory
- github.com/Froxlor/Froxlor/issues/555nvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-g77v-m226-3f7gghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-1000527ghsaADVISORY
- 0dd.zone/2018/05/31/Froxlor-Object-InjectionghsaWEB
- github.com/Froxlor/Froxlor/commit/c1e62e6be719affc003774a639de5c952ffd8ffcghsaWEB
News mentions
0No linked articles in our index yet.