4 matches found
CVE-2018-20773: Improper Control of Generation of Code
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional...
PT-2019-10216
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows PHP code execution. This can be achieved by visiting the "admin/?/page/edit/1" endpoint and inserting additional ?php lines. Recommendations: For Frog CMS version 0.9.5, consider restrictin...
PT-2019-10160
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue concerns a cross-site scripting XSS problem. It is located in the "admin/?/page/edit/1" body field. Recommendations: For Frog CMS version 0.9.5, update to a version that includes a fix for this...