365 matches found
CVE-2018-20775: Improper Control of Generation of Code
admin/?/plugin/filemanager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI...
CVE-2018-20778: Improper Neutralization of Input During Web Page Generation
admin/?/plugin/filemanager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element...
CVE-2018-20774: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field...
CVE-2018-20777: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field...
PT-2019-10215
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows PHP code execution. This can be achieved by sending ?php code to the "admin/?/layout/edit/1" URI, which is an API endpoint. Recommendations: For Frog CMS version 0.9.5, update to a newer...
CVE-2018-20773: Improper Control of Generation of Code
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-34649)
Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A cross-site scripting vulnerability exists in Frog CMS. An attacker can exploit this vulnerability to...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-01866)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit thi...
Cross site scripting
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
CVE-2019-6243
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
CVE-2019-6243
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
CVE-2019-6243
CVE-2019-6243 affects Frog CMS 0.9.5 with a cross-site scripting (XSS) vulnerability exposed via the forgot password page (the /admin/?/login/forgot URI). The issue is confirmed across multiple sources (NVD entry and CNVD/CVEs references) and is limited to input handling on the forgot-password fl...
CVE-2019-6243
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
PT-2019-18048
Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue allows for XSS via the forgot password page, specifically the "/admin/?/login/forgot" URI. Recommendations For Frog CMS version 0.9.5, update to a version that fixes this issue to prevent XSS attack...
CVE-2019-6243: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-01314)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5, which can be exploited by a remot...
CVE-2018-20680
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...
CVE-2018-20680
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...
CVE-2018-20680
Frog CMS 0.9.5 contains a Cross-Site Scripting (XSS) vulnerability in the admin/?/page/edit/1 body field. The CNVD entry indicates a remote attacker can exploit by sending a request to that path with a crafted body to inject arbitrary script/HTML. Root cause: likely insufficient input sanitizatio...