200 matches found
CVE-2018-20680
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...
CVE-2018-20680
Frog CMS 0.9.5 contains a Cross-Site Scripting (XSS) vulnerability in the admin/?/page/edit/1 body field. The CNVD entry indicates a remote attacker can exploit by sending a request to that path with a crafted body to inject arbitrary script/HTML. Root cause: likely insufficient input sanitizatio...
CVE-2018-20680
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...
Frog CMS 0.9.5 Cross Site Scripting
Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under /install/index.php is that the Database name...
Frog CMS 0.9.5 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under...
Frog CMS 0.9.5 - Cross-Site Scripting
Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under /install/index.php is that the Database name...
CVE-2018-19844
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...
CVE-2018-19844
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...
Sql injection
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...
CVE-2018-19844
Affected software: Frog CMS 0.9.5. Vulnerability: Cross-Site Scripting (XSS) via the admin/?/snippet/edit or admin/?/snippet/add name parameter, due to mishandling during snippet edit/add actions. Impact: XSS could allow arbitrary script injection. Root cause / details: The XSS is described acros...
CVE-2018-19844
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 contains a reflected XSS vulnerability: the Database name field sent to /install/index.php is reflected back to the user. This is documented across multiple connected sources (e.g., Exploit-DB entry 46067, 0day.today exploit description, PacketStorm listing). Exploitation details a...
CVE-2018-16447
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...