27 matches found
EUVD-2019-4844
Malware in sbrugna...
CVE-2022-25413
Maxsite CMS v108 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ftags at /admin/pageedit/3...
CVE-2019-13339
In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php content box, which can be used to get a user's cookie...
CVE-2024-42629
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/edit/10...
CVE-2024-42629
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/edit/10...
FrogCms security vulnerabilities
FrogCms is an HTTP server. A security vulnerability exists in FrogCms version v0.9.5, which originated from the discovery of a cross-site request forgery vulnerability via /admin/? /page/edit/10 was found to contain a cross-site request forgery vulnerability...
CVE-2024-42629: Cross-Site Request Forgery (CSRF)
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/edit/10...
CVE-2022-32007
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=...
PT-2022-17277
Name of the Vulnerable Software and Affected Versions Maxsite CMS version 108 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the f tags parameter at the "/admin/page edit/3" API endpoint. Recommendations For Maxsite CMS...
MaxSite CMS cross-site scripting vulnerabilities
MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project.MaxSite CMS 108 has a cross-site scripting vulnerability that can be exploited by attackers to perform cross-site scripting attacks via the ftags parameter in /admin/pageedit/3...
CVE-2021-44970
MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...
CVE-2018-20773
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional ?php lines...
PT-2019-10216
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows PHP code execution. This can be achieved by visiting the "admin/?/page/edit/1" endpoint and inserting additional ?php lines. Recommendations: For Frog CMS version 0.9.5, consider restrictin...
CVE-2018-20773: Improper Control of Generation of Code
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-01314)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5, which can be exploited by a remot...
CVE-2018-20680
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...
PT-2019-10160
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue concerns a cross-site scripting XSS problem. It is located in the "admin/?/page/edit/1" body field. Recommendations: For Frog CMS version 0.9.5, update to a version that includes a fix for this...
CVE-2018-20680: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...
DouCo DouPHP Cross-Site Scripting Vulnerability (CNVD-2019-00995)
DouCo DouPHP is a lightweight open source CMS Content Management System based on PHP and MySQL. A cross-site scripting vulnerability exists in admin/page.php?rec=edit in DouCo DouPHP version 1.5 20181221. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with...