228 matches found
Sql injection
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...
CVE-2018-19844
Affected software: Frog CMS 0.9.5. Vulnerability: Cross-Site Scripting (XSS) via the admin/?/snippet/edit or admin/?/snippet/add name parameter, due to mishandling during snippet edit/add actions. Impact: XSS could allow arbitrary script injection. Root cause / details: The XSS is described acros...
CVE-2018-19844
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...
CVE-2018-19844: Improper Neutralization of Input During Web Page Generation
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 contains a reflected XSS vulnerability: the Database name field sent to /install/index.php is reflected back to the user. This is documented across multiple connected sources (e.g., Exploit-DB entry 46067, 0day.today exploit description, PacketStorm listing). Exploitation details a...
PT-2018-15384
Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue allows for XSS via the Database name field to the "/install/index.php" API endpoint. Recommendations For Frog CMS version 0.9.5, update to a version that fixes this issue, as using the Database name...
CVE-2018-20448: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-16447
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...
Cross site request forgery (csrf)
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...
CVE-2018-16447
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...
CVE-2018-16447
CVE-2018-16447 affects Frog CMS 0.9.5, where the admin/?/user/edit/1 endpoint is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability arises in the admin interface and could enable remote attackers to perform unauthorized operations on behalf of an authenticated user. The provided d...
CVE-2018-16447
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...
Frog CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-10139)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. Frog CMS 0.9.5 in admin/? /user/edit/1 is a cross-site request forgery vulnerability that can be exploit...
CVE-2018-16447: Cross-Site Request Forgery (CSRF)
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...