CVE-2018-10806

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the filecurrentname parameter to the admin/?/plugin/filemanager/rename URI. This can be used in conjunction with CSRF...

CVE-2018-10806

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the filecurrentname parameter to the admin/?/plugin/filemanager/rename URI. This can be used in conjunction with CSRF...

CVE-2018-10806

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the filecurrentname parameter to the admin/?/plugin/filemanager/rename URI. This can be used in conjunction with CSRF...

CVE-2018-10806

CVE-2018-10806 (Frog CMS 0.9.5) : A reflected Cross-Site Scripting vulnerability exists in Frog CMS via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. The issue can be exploited in conjunction with CSRF. Affected product: Frog CMS 0.9.5. Vulnerable component: the ...

CVE-2018-10806: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the filecurrentname parameter to the admin/?/plugin/filemanager/rename URI. This can be used in conjunction with CSRF...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-09306)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit thi...

PT-2018-10117

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description A reflected Cross Site Scripting issue was found, which can be exploited via the filecurrent name parameter to the "admin/?/plugin/file manager/rename" URI. This issue can be used in conjunction with a CSRF...

CVE-2018-10645

CVE-2018-10645 affects Golden Frog VyprVPN 2.12.1.8015 for Windows. The VyprVPN service exposes a NetNamedPipe endpoint; its SetProperty method allows configuring AdditionalOpenVpnParameters and OpenVPN command line, enabling a dynamic library plugin via the OpenVPN plugin parameter to run code u...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-09162)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in the /install/index.php file in Frog CMS 0.9.5. A remote...

PT-2018-10023

Name of the Vulnerable Software and Affected Versions Golden Frog VyprVPN version 2.12.1.8015 Description The issue allows for SYSTEM privilege escalation through the "VyprVPN" service, which establishes a NetNamedPipe endpoint. This endpoint exposes methods that can be called by applications,...

CVE-2018-10645: Incorrect Permission Assignment for Critical Resource

Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The "SetProperty" method allows an attacker t...

Code injection

Frog CMS 0.9.5 has XSS in /install/index.php via the 'config''adminusername' field...

CVE-2018-10570

Frog CMS 0.9.5 has XSS in /install/index.php via the 'config''adminusername' field...

CVE-2018-10570

Frog CMS 0.9.5 has XSS in /install/index.php via the 'config''adminusername' field...

CVE-2018-10570

Frog CMS 0.9.5 has XSS in /install/index.php via the 'config''adminusername' field...

CVE-2018-10570

CVE-2018-10570 affects Frog CMS 0.9.5. The vulnerability is a Cross-Site Scripting (XSS) flaw in /install/index.php via the ['config']['admin_username'] field. CNVD notes that an attacker could inject arbitrary web script or HTML, implying a client-side impact on affected sessions/pages. The Red ...

PT-2018-9968

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue concerns a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices is not provided. The problem can be exploited through the...

CVE-2018-10570: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has XSS in /install/index.php via the 'config''adminusername' field...

Frog CMS 0.9.5 Cross Site Scripting

Exploit Title: Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings Date: 2018-04-23 Exploit Author: Wenming Jiang Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version: 0.9.5 Tested on: php 5.6...

Frog CMS 0.9.5 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings Exploit Author: Wenming Jiang Vendor Homepage: https://github.com/philippe/FrogCMS Software Link:...