145 matches found
FrogCms 安全漏洞
FrogCms is an HTTP server by philippe personal developer. A security vulnerability exists in FrogCms version v0.9.5, which stems from a vulnerability discovered via /admin/? /layout/edit/1 was found to contain a cross-site request forgery vulnerability...
CVE-2024-42624
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/delete/10...
PT-2024-30078 · Frog Cms · Frog Cms
Name of the Vulnerable Software and Affected Versions: FrogCMS version 0.9.5 Description: A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/snippet/edit/3" endpoint. Recommendations: For FrogCMS version 0.9.5, as a temporary...
CVE-2024-42629
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/edit/10...
CVE-2024-42626
FrogCMS v0.9.5 contains a Cross-Site Request Forgery (CSRF) vulnerability exploitable via /admin/?/snippet/add. The CVE description explicitly identifies a CSRF issue and notes a high impact (C/H/I/A = High) with CVSSv3.1 base metrics: AV:N, AC:L, PR:N, UI:R, S:U, C:H, I:H, A:H. Connected sources...
CVE-2024-42629
CVE-2024-42629 affects FrogCMS v0.9.5, exposing a Cross-Site Request Forgery (CSRF) vulnerability via the admin endpoint /admin/?/page/edit/10. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE list, PT Security enrichment). The most actionable mitigation noted in the co...
CVE-2024-42625
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/add...
CVE-2024-42623
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/delete/1...
CVE-2024-42623: Cross-Site Request Forgery (CSRF)
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/delete/1...
CVE-2024-42632: Cross-Site Request Forgery (CSRF)
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/add...
CVE-2024-42627
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/delete/3...
CVE-2024-42625
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/add...
CVE-2024-42624
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/delete/10...
FrogCms 安全漏洞
FrogCms is an HTTP server. A security vulnerability exists in FrogCms version v0.9.5, which originated via /admin/? /snippet/edit/3 was found to contain a cross-site request forgery vulnerability...
CVE-2024-42630
CVE-2024-42630 affects FrogCMS v0.9.5 with a Cross-Site Request Forgery (CSRF) in the admin file manager create_file endpoint: /admin/?/plugin/file_manager/create_file. Root cause is CSRF in the file management API, requiring user interaction for exploitation. Impact is high (confidentiality, int...
CVE-2024-42628
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/edit/3...
CVE-2024-42624
FrogCMS v0.9.5 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /admin/?/page/delete/10 endpoint. The issue is documented with a high impact (C/H/I/A) and CVSS 3.1 score 8.8. Attack vector is network, but requires user interaction (UI:R), and no privileges are ...
CVE-2024-42632
FrogCMS v0.9.5 is affected by a CSRF vulnerability exploitable via /admin/?/page/add. CVSSv3.1: 8.8 (HIGH) with users required and network access. The root cause is a Cross-Site Request Forgery condition; no fixed version is confirmed in provided docs. Red Hat/PTSecurity references confirm the en...