6 matches found
PT-2024-30082
Name of the Vulnerable Software and Affected Versions FrogCMS version 0.9.5 Description A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/layout/edit/1" endpoint. Recommendations For FrogCMS version 0.9.5, as a temporary...
CVE-2024-42631: Cross-Site Request Forgery (CSRF)
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/edit/1...
CVE-2024-42631
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/edit/1...
PT-2019-10215
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows PHP code execution. This can be achieved by sending ?php code to the "admin/?/layout/edit/1" URI, which is an API endpoint. Recommendations: For Frog CMS version 0.9.5, update to a newer...
PT-2019-10217
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a security problem where an attacker can inject malicious code. The problem occurs via the "admin/?/layout/edit/1" endpoint, specifically in the Body field. Recommendations: For Frog...