Critical Froxlor Flaw Lets Attackers Spoof DNS
Background Technical Deep Dive The DomainZones.add endpoint in Froxlor's API exposes a subtle but dangerous design flaw in how customer-submitted DNS zone data is processed. At a high level, this is a classic case of insufficient input validation on a privileged API surface. GET /api/json.php?