200 matches found
CVE-2018-10319
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
CVE-2018-10318
Frog CMS 0.9.5 has XSS via the admin/?/page/edit pagekeywords parameter, aka Edit Page Metadata...
Code injection
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
CVE-2018-10320
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...
CVE-2018-10318
Frog CMS 0.9.5 has XSS via the admin/?/page/edit pagekeywords parameter, aka Edit Page Metadata...
CVE-2018-10319
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
CVE-2018-10320
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...
CVE-2018-10320
CVE-2018-10320 affects Frog CMS 0.9.5 with a stored/reflected XSS via the admin/?/layout/edit layout[name] parameter (Edit Layout). The CNVD entry and NVD description confirm a cross-site scripting vulnerability in Frog CMS 0.9.5, exploitable remotely by crafting the name input to inject script. ...
CVE-2018-10318
Frog CMS 0.9.5 contains a cross-site scripting (XSS) vulnerability in the admin/?/page/edit page[keywords] parameter (Edit Page Metadata). The issue arises from user-supplied content in the keywords field that is reflected in the page. Exploitation specifics beyond this description are not provid...
CVE-2018-10319
Frog CMS 0.9.5 is affected by a Cross‑Site Scripting (XSS) vulnerability in the admin/?/snippet/edit (snippet[name]) parameter, i.e., the Edit Snippet action. The issue enables injection via the snippet name during edit, as documented under CVE-2018-10319. Connected records also reference the rel...
CVE-2018-10320
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...
CVE-2018-10318
Frog CMS 0.9.5 has XSS via the admin/?/page/edit pagekeywords parameter, aka Edit Page Metadata...
CVE-2018-10319
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08555)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Frog CMS Cross-Site Scripting Vulnerability
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Frog CMS Cross-Site Request Forgery Vulnerability
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. In Frog CMS version 0.9.5, a /admin/? /user/add is vulnerable to cross-site request forgery. A remote...
CVE-2018-9991
Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...