CVE-2018-20448: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...

SQL Injection Vulnerability in Frog Smile Online Business Management Software of Shenzhen Kewe Technology Co.

Frog Smile Online Business Management Software is an online management software based on cloud service model and B/S architecture for all kinds of franchised industries on the Internet platform. Shenzhen Pulse Technology Co., Ltd. Pulse - frog smile online business management software SQL injecti...

CVE-2018-16447

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...

Cross site request forgery (csrf)

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...

CVE-2018-16447

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...

CVE-2018-16447

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...

CVE-2018-16447

CVE-2018-16447 affects Frog CMS 0.9.5, where the admin/?/user/edit/1 endpoint is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability arises in the admin interface and could enable remote attackers to perform unauthorized operations on behalf of an authenticated user. The provided d...

PT-2018-13574

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue concerns a CSRF vulnerability in the admin interface, specifically affecting the "user/edit/1" endpoint. This could potentially allow unauthorized actions to be performed on user accounts...

CVE-2018-16447: Cross-Site Request Forgery (CSRF)

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...

Frog CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-10139)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. Frog CMS 0.9.5 in admin/? /user/edit/1 is a cross-site request forgery vulnerability that can be exploit...

Design/Logic Flaw

Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/filemanager/save...

Cross site scripting

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

CVE-2018-16374

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

CVE-2018-16373

Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/filemanager/save...

CVE-2018-16374

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

CVE-2018-16373

Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/filemanager/save...

CVE-2018-16373

Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/filemanager/save...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-10140)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A stored cross-site scripting vulnerability exists in Frog CMS 0.9.5, which can be exploited by an...

CVE-2018-16373

Frog CMS 0.9.5 is affected by a file-upload vulnerability described as an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save. The available sources (NVD/NVD-derived entries and CNVD/PRION/CVE records) consistently identify Frog CMS 0.9.5 and the file_manager/save end...

PT-2018-13528

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue is related to stored XSS. It can be exploited via the "/admin/?/plugin/comment/settings" API endpoint. Recommendations For Frog CMS version 0.9.5, update to a version that contains a fix for this...