Code injection

2019-02-1102:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

JSON

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.

CPENameOperatorVersion
frog_cmseq0.9.5

CPE	Name	Operator	Version
	frog_cms	eq	0.9.5

References

github.com/philippe/FrogCMS/issues/27