PT-2018-13528

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue is related to stored XSS. It can be exploited via the "/admin/?/plugin/comment/settings" API endpoint. Recommendations For Frog CMS version 0.9.5, update to a version that contains a fix for this...

PT-2018-13527

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue allows creation of files via the "/admin/?/plugin/file manager/save" API endpoint. Recommendations For Frog CMS version 0.9.5, consider disabling the file manager plugin until a patch is available...

Frog CMS File Upload Vulnerability (CNVD-2019-10141)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A file upload vulnerability exists in Frog CMS 0.9.5, which can be exploited by an attacker via /admin/?...

CVE-2018-16374: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

CVE-2018-16373: Unrestricted Upload of File with Dangerous Type

Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/filemanager/save...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-10140)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A stored cross-site scripting vulnerability exists in Frog CMS 0.9.5, which can be exploited by an...

CVE-2018-13133

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

Code injection

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

CVE-2018-13133

Connected documents indicate CVE-2018-13133 concerns Golden Frog VyprVPN prior to 2018-06-21 and a Windows installer vulnerability. The PRION record lists the issue as “Code injection” with no further technical specifics, and other sources reiterate the vulnerable timeframe without detailing root...

CVE-2018-13133

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

CVE-2018-13133: Untrusted Search Path

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

PT-2018-11623

Name of the Vulnerable Software and Affected Versions Golden Frog VyprVPN versions prior to 2018-06-21 Description The issue is related to the installation process of Golden Frog VyprVPN on Windows. Recommendations For versions prior to 2018-06-21, update to a version released after 2018-06-21 to...

CVE-2018-11098

An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/filemanager/upload URI, a similar issue to CVE-2014-4912...

CVE-2018-11098

An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/filemanager/upload URI, a similar issue to CVE-2014-4912...

CVE-2018-11098

CVE-2018-11098 affects Frog CMS 0.9.5. A file-upload vulnerability exists at the admin/?/plugin/file_manager/upload URI, described as a vulnerability similar to CVE-2014-4912. Connected documents reiterate an arbitrary file-upload issue in Frog CMS 0.9.5. No explicit patch/version remediation is ...

CVE-2018-11098

An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/filemanager/upload URI, a similar issue to CVE-2014-4912...

Frog CMS File Upload Vulnerability

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A security vulnerability exists in Frog CMS version 0.9.5. An attacker can exploit the vulnerability wit...

CVE-2018-11098: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/filemanager/upload URI, a similar issue to CVE-2014-4912...

PT-2018-10308

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description An issue was discovered in Frog CMS, where there is a file upload vulnerability via the "admin/?/plugin/file manager/upload" URI. Recommendations For Frog CMS version 0.9.5, consider restricting access to the...

Cross site scripting

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the filecurrentname parameter to the admin/?/plugin/filemanager/rename URI. This can be used in conjunction with CSRF...