CVE-2024-42626

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/add...

CVE-2024-42626

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/add...

FrogCms 安全漏洞

FrogCms is an HTTP server by philippe personal developer. A security vulnerability exists in FrogCms version v0.9.5, which stems from a vulnerability discovered via /admin/? /snippet/add was found to contain a cross-site request forgery vulnerability...

CVE-2024-42626

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/add...

PT-2024-30076

Name of the Vulnerable Software and Affected Versions FrogCMS version 0.9.5 Description A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/snippet/add" API endpoint. Recommendations For FrogCMS version 0.9.5, consider disabling...

CVE-2024-42626: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/add...

PT-2019-11961

Name of the Vulnerable Software and Affected Versions Wolf CMS version 0.8.3.1 Description The issue allows an attacker to insert arbitrary JavaScript as user input in the "Add Snippet" module, which is accessible through the "/admin/snippet/add" API endpoint. This input will be executed whenever...

FROG CMS Cross-Site Scripting Vulnerability (CNVD-2019-00385)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in FROG CMS version 0.9.5, which can be exploited by a remot...

CVE-2018-19844: Improper Neutralization of Input During Web Page Generation

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...

PT-2018-15126

Name of the Vulnerable Software and Affected Versions FROG CMS version 0.9.5 Description The issue concerns a mishandling of the name parameter during an edit action in the admin/?/snippet/add API Endpoint. This leads to a potential XSS issue. Recommendations For FROG CMS version 0.9.5, avoid usi...