CVE-2024-41603: Cross-Site Request Forgery (CSRF)

Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...

CVE-2024-41603

Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...

PT-2024-29460 · Spina Cms · Spina Cms

Name of the Vulnerable Software and Affected Versions: Spina CMS version 2.18.0 Description: A Cross-Site Request Forgery CSRF issue was found in Spina CMS. The issue is related to the API endpoint "/admin/layout". Recommendations: For Spina CMS version 2.18.0, as a temporary workaround, consider...

CVE-2018-20774

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field...

CVE-2018-20772

Frog CMS 0.9.5 allows PHP code execution via ?php to the admin/?/layout/edit/1 URI...

CVE-2018-20774

CVE-2018-20774 affects Frog CMS 0.9.5, with a cross-site scripting (XSS) vulnerability in the admin/?/layout/edit/1 Body field. The root cause is improper input handling that allows injecting script into a form field which is subsequently rendered without sufficient sanitization, enabling client-...

CVE-2018-20774: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field...

PT-2019-10215

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows PHP code execution. This can be achieved by sending ?php code to the "admin/?/layout/edit/1" URI, which is an API endpoint. Recommendations: For Frog CMS version 0.9.5, update to a newer...

PT-2019-10217

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a security problem where an attacker can inject malicious code. The problem occurs via the "admin/?/layout/edit/1" endpoint, specifically in the Body field. Recommendations: For Frog...

CVE-2018-10320

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08554)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...

CVE-2018-10320: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...

PT-2018-9826

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a cross-site scripting XSS problem. It occurs via the layoutname parameter in the admin/?/layout/edit layout endpoint. Recommendations: For Frog CMS version 0.9.5, avoid using the...