PRODUCT PROFILE

web_proxy

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2020-175062020/08/12

Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.

web_proxyPoC 已收录

CVSS9.8EPSS 92.2%

高危CVE-2020-175052020/08/12

Artica Web Proxy 4.30 - OS Command Injection

Artica Web Proxy 4.30 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via service_cmds_peform.

web_proxyPoC 已收录RCE

CVSS8.8EPSS 90.2%