252 matches found
Code injection
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
CVE-2018-10319
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
CVE-2018-10320
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...
CVE-2018-10318
Frog CMS 0.9.5 has XSS via the admin/?/page/edit pagekeywords parameter, aka Edit Page Metadata...
CVE-2018-10318
Frog CMS 0.9.5 has XSS via the admin/?/page/edit pagekeywords parameter, aka Edit Page Metadata...
CVE-2018-10319
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
CVE-2018-10320
CVE-2018-10320 affects Frog CMS 0.9.5 with a stored/reflected XSS via the admin/?/layout/edit layout[name] parameter (Edit Layout). The CNVD entry and NVD description confirm a cross-site scripting vulnerability in Frog CMS 0.9.5, exploitable remotely by crafting the name input to inject script. ...
CVE-2018-10318
Frog CMS 0.9.5 contains a cross-site scripting (XSS) vulnerability in the admin/?/page/edit page[keywords] parameter (Edit Page Metadata). The issue arises from user-supplied content in the keywords field that is reflected in the page. Exploitation specifics beyond this description are not provid...
CVE-2018-10320
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...
CVE-2018-10319
Frog CMS 0.9.5 is affected by a Cross‑Site Scripting (XSS) vulnerability in the admin/?/snippet/edit (snippet[name]) parameter, i.e., the Edit Snippet action. The issue enables injection via the snippet name during edit, as documented under CVE-2018-10319. Connected records also reference the rel...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08555)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
CVE-2018-10321: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...
CVE-2018-10319: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
CVE-2018-10318: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/page/edit pagekeywords parameter, aka Edit Page Metadata...
CVE-2018-10320: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...
PT-2018-9823
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a cross-site scripting XSS problem. It occurs via the admin/?/page/edit page, specifically through the keywords parameter. This allows for malicious script execution. Recommendations...
PT-2018-9826
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a cross-site scripting XSS problem. It occurs via the layoutname parameter in the admin/?/layout/edit layout endpoint. Recommendations: For Frog CMS version 0.9.5, avoid using the...
PT-2018-9824
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs via the snippetname parameter in the /admin/?/snippet/edit API endpoint. Recommendations: For Frog CMS version 0.9.5, avoid using the...
PT-2018-9827
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a stored Cross Site Scripting vulnerability. It can be triggered via the Admin Site title in the Settings section. Recommendations: For Frog CMS version 0.9.5, update to a newer...
Frog CMS Cross-Site Request Forgery Vulnerability
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. In Frog CMS version 0.9.5, a /admin/? /user/add is vulnerable to cross-site request forgery. A remote...