308 matches found
CVE-2018-10320
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layoutname parameter, aka Edit Layout...
CVE-2018-10319
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...
CVE-2018-10318
Frog CMS 0.9.5 has XSS via the admin/?/page/edit pagekeywords parameter, aka Edit Page Metadata...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08555)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08556)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08554)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08587)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. The vulnerability can be exploite...
Frog CMS Cross-Site Scripting Vulnerability
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08549)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Frog CMS Cross-Site Request Forgery Vulnerability
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. In Frog CMS version 0.9.5, a /admin/? /user/add is vulnerable to cross-site request forgery. A remote...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...
CVE-2018-9991
Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...
CVE-2018-9991
Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...
CVE-2018-9992
Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...
Arbitrary file deletion
Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...
CVE-2018-9992
Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...
CVE-2018-9991
Frog CMS 0.9.5 is affected by a Cross‑Site Scripting (XSS) vulnerability in the admin user creation flow. The flaw is triggered via the Name or Username parameter in the URL path /admin/?/user/add, allowing injected scripts to potentially execute in the context of an administrator. The issue is d...
CVE-2018-9992
Frog CMS 0.9.5 is affected by a cross-site scripting vulnerability that can be triggered by entering malicious content in the name field when creating a new File or Directory via the admin/?/plugin/file_manager/browse/ screen. The issue is documented across multiple sources (NVD, CNVD, CVE record...