CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

FrogCMS 代码问题漏洞

FrogCMS an open source content management system. FrogCMS file upload vulnerability exists, the vulnerability is due to product design flaws do not limit the file upload, an attacker can use this vulnerability to upload malicious files to remotely execute arbitrary code...

Command execution vulnerability in FrogCMS Sn***.php file

FrogCMS is an enterprise building system CMS based on PHP+Mysql architecture that can run on various server platforms such as Linux, Windows and so on. FrogCMS Sn.php file has a command execution vulnerability that can be exploited by an attacker to gain access to the site permissions and so on...

Command execution vulnerability in FrogCMS La***.php file

FrogCMS is an enterprise building system CMS based on PHP+Mysql architecture that can run on various server platforms such as Linux, Windows and so on. FrogCMS La.php file has a command execution vulnerability that can be exploited by an attacker to gain access to the site permissions and so on...

Command execution vulnerability in FrogCMS Pa***.php file

FrogCMS is an enterprise building system CMS based on PHP+Mysql architecture that can run on various server platforms such as Linux, Windows and so on. FrogCMS Pa.php file has a command execution vulnerability that can be exploited by an attacker to gain access to the site permissions and so on...

Frog CMS 0.9.5 Open Redirect

Exploit Title: FrogCMS Open Redirect Vulnerability + Google Dork: N/A + Date: 10/8/2015 + Exploit Author: Arash Khazaei + Vendor Homepage: http://www.madebyfrog.com/ + Software Link: http://www.madebyfrog.com/download.html + Version: 0.9.5Last Version + Tested on: Kali / Mozilla FireFox, Windows...

FrogCMS 0.9.5 Cross Site Request Forgery

Software : FrogCMS v0.9.5 Author : Jeremiah Talamantes for RedTeam Security Date : June 10, 2010 OS : Windows Tested on : XP SP2 EN Virtual PC Type of vuln : CSRF Description : Lack of security controls in place to prevent Cross Site Request Forgery attacks. The POC below will open a core module...