228 matches found
CVE-2018-20774
CVE-2018-20774 affects Frog CMS 0.9.5, with a cross-site scripting (XSS) vulnerability in the admin/?/layout/edit/1 Body field. The root cause is improper input handling that allows injecting script into a form field which is subsequently rendered without sufficient sanitization, enabling client-...
CVE-2018-20777
CVE-2018-20777 affects Frog CMS 0.9.5 with Cross-Site Scripting in the admin/?/snippet/edit/1 Body field. The NVD entry lists a CVSSv3.0 base score of 5.4 (MEDIUM) with NETWORK attack vector, LOW privileges required, user interaction REQUIRED, and a CHANGED scope; CVSSv2 base score is 3.5 (LOW). ...
CVE-2018-20772
Frog CMS 0.9.5 allows PHP code execution via ?php to the admin/?/layout/edit/1 URI...
CVE-2018-20773
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional ?php lines...
CVE-2018-20775
The CVE-2018-20775 entry concerns Frog CMS 0.9.5 where the admin/?/plugin/file_manager exposes a flaw that allows an attacker to create a new .php file containing PHP code and access it via the public/ URI, enabling PHP code execution. This aligns with the NVD description of a file-manager vulner...
CVE-2018-20776
Frog CMS 0.9.5 provides a directory listing for a /public request...
CVE-2018-20776
Frog CMS 0.9.5 is affected by an information-disclosure issue where a /public request can return a directory listing. The vulnerability is described as a directory listing exposure in Frog CMS 0.9.5. Connected sources (NVD/CVE records and CNVD) confirm the component and issue, but do not provide ...
CVE-2018-20775
admin/?/plugin/filemanager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI...
Frog CMS Code Injection Vulnerability (CNVD-2019-34646)
Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A code injection vulnerability exists in Frog CMS. An attacker could use this vulnerability to generate...
CVE-2018-20777: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field...
CVE-2018-20772: Improper Control of Generation of Code
Frog CMS 0.9.5 allows PHP code execution via...
CVE-2018-20773: Improper Control of Generation of Code
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional...
Frog CMS Code Injection Vulnerability
Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A code injection vulnerability exists in Frog CMS. An attacker could use this vulnerability to generate...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-34648)
Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A cross-site scripting vulnerability exists in Frog CMS. An attacker can exploit this vulnerability to...
CVE-2018-20778: Improper Neutralization of Input During Web Page Generation
admin/?/plugin/filemanager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-34645)
Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A cross-site scripting vulnerability exists in Frog CMS. An attacker can exploit this vulnerability to...
PT-2019-10221
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows for XSS by creating a new file containing a crafted attribute of an IMG element, specifically targeting the "admin/?/plugin/file manager" endpoint. Recommendations: For Frog CMS version...
Frog CMS Code Injection Vulnerability (CNVD-2019-34647)
Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A code injection vulnerability exists in Frog CMS. An attacker could use this vulnerability to generate...
CVE-2018-20775: Improper Control of Generation of Code
admin/?/plugin/filemanager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI...