PT-2019-10160

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue concerns a cross-site scripting XSS problem. It is located in the "admin/?/page/edit/1" body field. Recommendations: For Frog CMS version 0.9.5, update to a version that includes a fix for this...

CVE-2018-20680: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field...

FROG CMS Cross-Site Scripting Vulnerability (CNVD-2019-00385)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in FROG CMS version 0.9.5, which can be exploited by a remot...

Frog CMS 0.9.5 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under...

Frog CMS 0.9.5 Cross Site Scripting

Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under /install/index.php is that the Database name...

Frog CMS 0.9.5 - Cross-Site Scripting

Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under /install/index.php is that the Database name...

Sql injection

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...

CVE-2018-19844

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...

CVE-2018-19844

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...

CVE-2018-19844

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...

CVE-2018-19844

Affected software: Frog CMS 0.9.5. Vulnerability: Cross-Site Scripting (XSS) via the admin/?/snippet/edit or admin/?/snippet/add name parameter, due to mishandling during snippet edit/add actions. Impact: XSS could allow arbitrary script injection. Root cause / details: The XSS is described acros...

PT-2018-15126

Name of the Vulnerable Software and Affected Versions FROG CMS version 0.9.5 Description The issue concerns a mishandling of the name parameter during an edit action in the admin/?/snippet/add API Endpoint. This leads to a potential XSS issue. Recommendations For FROG CMS version 0.9.5, avoid usi...

CVE-2018-19844: Improper Neutralization of Input During Web Page Generation

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-26649)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5, which can be exploited by remote...

Design/Logic Flaw

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...

CVE-2018-20448

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...

CVE-2018-20448

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...

CVE-2018-20448

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...

CVE-2018-20448

Frog CMS 0.9.5 contains a reflected XSS vulnerability: the Database name field sent to /install/index.php is reflected back to the user. This is documented across multiple connected sources (e.g., Exploit-DB entry 46067, 0day.today exploit description, PacketStorm listing). Exploitation details a...

PT-2018-15384

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue allows for XSS via the Database name field to the "/install/index.php" API endpoint. Recommendations For Frog CMS version 0.9.5, update to a version that fixes this issue, as using the Database name...