Multiple Vulnerabilities in Frog CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerability in Frog CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in Frog CMS 1.1 The vulnerability exists due to input sanitation...

Frog CMS 0.9.5 Cross Site Request Forgery

Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download: http://www.madebyfrog.com/public/download/files/frog095.tar.gz --- -= CSRF PoC 1 - Create Admin User =- Frog CMS 0.9.5 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF PoC 2 - Delete User =- -= CSRF PoC 3...

Frog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities

Frog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download: http://www.madebyfrog.com/public/download/files/frog095.tar.gz --- -= CSRF PoC 1 - Create Admin User =- Frog CMS 0.9.5 Multiple CSRF...

Frog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download: http://www.madebyfrog.com/public/download/files/frog095.tar.gz --- -= CSRF PoC 1 - Create Admin User =- Frog CMS 0.9.5 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF PoC 2 - Delete User =- -= CSRF PoC 3...

Frog CMS 0.9.5 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================ Frog CMS 0.9.5 Multiple CSRF Vulnerabilities ============================================ Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download:...

Frog CMS 0.9.5 - Cross-Site Request Forgery

Frog CMS 0.9.5 - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Frog Date: 13. December 2009. -------------------------------------------------------------------------------------------------...

Frog CMS 0.9.5 - Cross-Site Request Forgery

------------------------------------------------------------------------------------------------- Title: Frog Date: 13. December 2009. -------------------------------------------------------------------------------------------------...

Frog CMS 0.9.4 Traversal / XSS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Evaluation of Frog CMS Version tested: 0.9.4 by Justin C. Klein Keane This advisory is also posted at http://www.madirish.net/vulnerabilities/frog-cms Frog CMS http://www.madebyfrog.com/ is a lightweight content management system written in P...