252 matches found
PT-2019-10218
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows PHP code execution by creating a new .php file containing PHP code through the "admin/?/plugin/file manager" endpoint, and then visiting this file under the public/ URI. Recommendations: Fo...
PT-2019-10221
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows for XSS by creating a new file containing a crafted attribute of an IMG element, specifically targeting the "admin/?/plugin/file manager" endpoint. Recommendations: For Frog CMS version...
PT-2019-10220
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a XSS flaw. It can be exploited via the Body field in the admin/?/snippet/edit/1 endpoint. Recommendations: For Frog CMS version 0.9.5, update to a version that includes a fix for th...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-34648)
Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A cross-site scripting vulnerability exists in Frog CMS. An attacker can exploit this vulnerability to...
CVE-2018-20773: Improper Control of Generation of Code
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional...
CVE-2018-20775: Improper Control of Generation of Code
admin/?/plugin/filemanager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI...
CVE-2018-20778: Improper Neutralization of Input During Web Page Generation
admin/?/plugin/filemanager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element...
CVE-2018-20774: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field...
CVE-2018-20777: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-01866)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit thi...
Cross site scripting
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
CVE-2019-6243
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
CVE-2019-6243
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
CVE-2019-6243
CVE-2019-6243 affects Frog CMS 0.9.5 with a cross-site scripting (XSS) vulnerability exposed via the forgot password page (the /admin/?/login/forgot URI). The issue is confirmed across multiple sources (NVD entry and CNVD/CVEs references) and is limited to input handling on the forgot-password fl...
CVE-2019-6243
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
PT-2019-18048
Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue allows for XSS via the forgot password page, specifically the "/admin/?/login/forgot" URI. Recommendations For Frog CMS version 0.9.5, update to a version that fixes this issue to prevent XSS attack...
CVE-2019-6243: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-01314)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5, which can be exploited by a remot...