{"affected":[{"conditional":false,"product":"froxlor","source":"NVD","vendor":"froxlor","versions":[{"lessThan":"2.3.6","status":"affected","version":"*","versionType":"custom"}]},{"defaultStatus":"unaffected","ecosystem":"Packagist","packageName":"froxlor/froxlor","product":"froxlor/froxlor","source":"OSV GHSA-gc9w-cc93-rjv8","vendor":"","versions":[{"status":"affected","version":"0.10.0","versionType":"Packagist"},{"status":"affected","version":"0.10.0-rc1","versionType":"Packagist"},{"status":"affected","version":"0.10.0-rc2","versionType":"Packagist"},{"status":"affected","version":"0.10.1","versionType":"Packagist"},{"status":"affected","version":"0.10.10","versionType":"Packagist"},{"status":"affected","version":"0.10.11","versionType":"Packagist"},{"status":"affected","version":"0.10.12","versionType":"Packagist"},{"status":"affected","version":"0.10.13","versionType":"Packagist"},{"status":"affected","version":"0.10.14","versionType":"Packagist"},{"status":"affected","version":"0.10.15","versionType":"Packagist"},{"status":"affected","version":"0.10.16","versionType":"Packagist"},{"status":"affected","version":"0.10.17","versionType":"Packagist"},{"status":"affected","version":"0.10.18","versionType":"Packagist"},{"status":"affected","version":"0.10.19","versionType":"Packagist"},{"status":"affected","version":"0.10.2","versionType":"Packagist"},{"status":"affected","version":"0.10.20","versionType":"Packagist"},{"status":"affected","version":"0.10.21","versionType":"Packagist"},{"status":"affected","version":"0.10.22","versionType":"Packagist"},{"status":"affected","version":"0.10.23","versionType":"Packagist"},{"status":"affected","version":"0.10.23.1","versionType":"Packagist"},{"status":"affected","version":"0.10.24","versionType":"Packagist"},{"status":"affected","version":"0.10.25","versionType":"Packagist"},{"status":"affected","version":"0.10.26","versionType":"Packagist"},{"status":"affected","version":"0.10.27","versionType":"Packagist"},{"status":"affected","version":"0.10.28","versionType":"Packagist"},{"status":"affected","version":"0.10.29","versionType":"Packagist"},{"status":"affected","version":"0.10.29.1","versionType":"Packagist"},{"status":"affected","version":"0.10.3","versionType":"Packagist"},{"status":"affected","version":"0.10.30","versionType":"Packagist"},{"status":"affected","version":"0.10.31","versionType":"Packagist"},{"status":"affected","version":"0.10.32","versionType":"Packagist"},{"status":"affected","version":"0.10.33","versionType":"Packagist"},{"status":"affected","version":"0.10.34","versionType":"Packagist"},{"status":"affected","version":"0.10.34.1","versionType":"Packagist"},{"status":"affected","version":"0.10.35","versionType":"Packagist"},{"status":"affected","version":"0.10.35.1","versionType":"Packagist"},{"status":"affected","version":"0.10.36","versionType":"Packagist"},{"status":"affected","version":"0.10.37","versionType":"Packagist"},{"status":"affected","version":"0.10.38","versionType":"Packagist"},{"status":"affected","version":"0.10.38.1","versionType":"Packagist"},{"status":"affected","version":"0.10.38.2","versionType":"Packagist"},{"status":"affected","version":"0.10.38.3","versionType":"Packagist"},{"status":"affected","version":"0.10.4","versionType":"Packagist"},{"status":"affected","version":"0.10.5","versionType":"Packagist"},{"status":"affected","version":"0.10.6","versionType":"Packagist"},{"status":"affected","version":"0.10.7","versionType":"Packagist"},{"status":"affected","version":"0.10.8","versionType":"Packagist"},{"status":"affected","version":"0.10.9","versionType":"Packagist"},{"status":"affected","version":"2.0.0","versionType":"Packagist"},{"status":"affected","version":"2.0.1","versionType":"Packagist"},{"status":"affected","version":"2.0.10","versionType":"Packagist"},{"status":"affected","version":"2.0.11","versionType":"Packagist"},{"status":"affected","version":"2.0.12","versionType":"Packagist"},{"status":"affected","version":"2.0.13","versionType":"Packagist"},{"status":"affected","version":"2.0.14","versionType":"Packagist"},{"status":"affected","version":"2.0.15","versionType":"Packagist"},{"status":"affected","version":"2.0.16","versionType":"Packagist"},{"status":"affected","version":"2.0.17","versionType":"Packagist"},{"status":"affected","version":"2.0.18","versionType":"Packagist"},{"status":"affected","version":"2.0.19","versionType":"Packagist"},{"status":"affected","version":"2.0.2","versionType":"Packagist"},{"status":"affected","version":"2.0.20","versionType":"Packagist"},{"status":"affected","version":"2.0.21","versionType":"Packagist"},{"status":"affected","version":"2.0.22","versionType":"Packagist"},{"status":"affected","version":"2.0.23","versionType":"Packagist"},{"status":"affected","version":"2.0.24","versionType":"Packagist"},{"status":"affected","version":"2.0.3","versionType":"Packagist"},{"status":"affected","version":"2.0.4","versionType":"Packagist"},{"status":"affected","version":"2.0.5","versionType":"Packagist"},{"status":"affected","version":"2.0.6","versionType":"Packagist"},{"status":"affected","version":"2.0.7","versionType":"Packagist"},{"status":"affected","version":"2.0.8","versionType":"Packagist"},{"status":"affected","version":"2.0.9","versionType":"Packagist"},{"status":"affected","version":"2.1.0","versionType":"Packagist"},{"status":"affected","version":"2.1.0-beta1","versionType":"Packagist"},{"status":"affected","version":"2.1.0-beta2","versionType":"Packagist"},{"status":"affected","version":"2.1.0-rc1","versionType":"Packagist"},{"status":"affected","version":"2.1.0-rc2","versionType":"Packagist"},{"status":"affected","version":"2.1.0-rc3","versionType":"Packagist"},{"status":"affected","version":"2.1.1","versionType":"Packagist"},{"status":"affected","version":"2.1.2","versionType":"Packagist"},{"status":"affected","version":"2.1.3","versionType":"Packagist"},{"status":"affected","version":"2.1.4","versionType":"Packagist"},{"status":"affected","version":"2.1.5","versionType":"Packagist"},{"status":"affected","version":"2.1.6","versionType":"Packagist"},{"status":"affected","version":"2.1.7","versionType":"Packagist"},{"status":"affected","version":"2.1.8","versionType":"Packagist"},{"status":"affected","version":"2.1.9","versionType":"Packagist"},{"status":"affected","version":"2.2.0","versionType":"Packagist"},{"status":"affected","version":"2.2.0-rc1","versionType":"Packagist"},{"status":"affected","version":"2.2.0-rc2","versionType":"Packagist"},{"status":"affected","version":"2.2.0-rc3","versionType":"Packagist"},{"status":"affected","version":"2.2.1","versionType":"Packagist"},{"status":"affected","version":"2.2.2","versionType":"Packagist"},{"status":"affected","version":"2.2.3","versionType":"Packagist"},{"status":"affected","version":"2.2.4","versionType":"Packagist"},{"status":"affected","version":"2.2.5","versionType":"Packagist"},{"status":"affected","version":"2.2.6","versionType":"Packagist"},{"status":"affected","version":"2.2.7","versionType":"Packagist"},{"status":"affected","version":"2.2.8","versionType":"Packagist"},{"status":"affected","version":"2.3.0","versionType":"Packagist"},{"status":"affected","version":"2.3.0-rc1","versionType":"Packagist"},{"status":"affected","version":"2.3.1","versionType":"Packagist"},{"status":"affected","version":"2.3.2","versionType":"Packagist"},{"status":"affected","version":"2.3.3","versionType":"Packagist"},{"status":"affected","version":"2.3.4","versionType":"Packagist"},{"status":"affected","version":"2.3.5","versionType":"Packagist"},{"events":[{"introduced":"0"},{"fixed":"2.3.6"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*","versionEndExcluding":"2.3.6","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2026-41229","cwes":["CWE-94"],"description":"Froxlor is open source server administration software. Prior to version 2.3.6, `PhpHelper::parseArrayToString()` writes string values into single-quoted PHP string literals without escaping single quotes. When an admin with `change_serversettings` permission adds or updates a MySQL server via the API, the `privileged_user` parameter (which has no input validation) is written unescaped into `lib/userdata.inc.php`. Since this file is `require`d on every request via `Database::getDB()`, an attacker can inject arbitrary PHP code that executes as the web server user on every subsequent page load. Version 2.3.6 contains a patch.","epss":null,"exploits":[{"kind":"exploit","source":"security-advisories@github.com","url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-gc9w-cc93-rjv8"},{"kind":"exploit","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-gc9w-cc93-rjv8"}],"kev":null,"metrics":[{"score":9.1,"severity":"critical","source":"NVD: security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794438600263,"publishedAt":1776917779563,"references":[{"source":"security-advisories@github.com","tags":["Patch"],"url":"https://github.com/froxlor/froxlor/commit/3589ddf93ab59eb2a8971f0f56cbf6266d03c4ae"},{"source":"security-advisories@github.com","tags":["Release Notes"],"url":"https://github.com/froxlor/froxlor/releases/tag/2.3.6"},{"source":"security-advisories@github.com","tags":["Exploit","Mitigation","Vendor Advisory"],"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-gc9w-cc93-rjv8"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Mitigation","Vendor Advisory"],"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-gc9w-cc93-rjv8"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-gc9w-cc93-rjv8"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-gc9w-cc93-rjv8"}],"remediation":[{"kind":"fix","source":"security-advisories@github.com","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/froxlor/froxlor/commit/3589ddf93ab59eb2a8971f0f56cbf6266d03c4ae"},{"kind":"fix","source":"OSV GHSA-gc9w-cc93-rjv8","text":"froxlor/froxlor (Packagist): OSV reports a fixed version 2.3.6. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-gc9w-cc93-rjv8"}],"revision":"7d7a3f694ce3eca0e618aacd5d2cde1ee780328269de6aca85502a2881dddbc6","sources":[{"modifiedAt":1794438600263,"name":"NVD","retrievedAt":1794442735510,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41229"},{"modifiedAt":1777997512285,"name":"OSV / GitHub Security Advisories","retrievedAt":1794442736948,"url":"https://osv.dev/vulnerability/GHSA-gc9w-cc93-rjv8"}],"ssvc":{"assessedAt":1776947471971,"automatable":"no","exploitation":"poc","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"total"},"status":"published","title":"CVE-2026-41229","updatedAt":1794442736948}