CVE-2018-9992

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...

CVE-2018-9991

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...

CVE-2018-9992

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...

CVE-2018-9991

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...

CVE-2018-9992

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...

CVE-2018-9991

Frog CMS 0.9.5 is affected by a Cross‑Site Scripting (XSS) vulnerability in the admin user creation flow. The flaw is triggered via the Name or Username parameter in the URL path /admin/?/user/add, allowing injected scripts to potentially execute in the context of an administrator. The issue is d...

CVE-2018-9992

Frog CMS 0.9.5 is affected by a cross-site scripting vulnerability that can be triggered by entering malicious content in the name field when creating a new File or Directory via the admin/?/plugin/file_manager/browse/ screen. The issue is documented across multiple sources (NVD, CNVD, CVE record...

PT-2018-19155

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the name field when creating a new "File" or "Directory" on the admin screen, specifically at the...

CVE-2018-9991: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...

CVE-2018-9992: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...

PT-2018-19154

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue allows for XSS via the "/admin/?/user/add" API endpoint, specifically through the Name or Username parameters. Recommendations For Frog CMS version 0.9.5, avoid using the Name or Username parameters...

Frog CMS 0.9.5 - Cross-Site Request Forgery (Add User) Vulnerability

Exploit for php platform in category web applications Exploit Title:​​ Cross Site Request Forgery- Frog CMS Exploit Author: Samrat Das Contact: http://twitter.com/SamratDas93 Website: https://securitywarrior9.blogspot.in/ Vendor Homepage: https://github.com/philippe/FrogCMS Version: 0.9.5 CVE :...

Frog CMS 0.9.5 - Cross-Site Request Forgery (Add User)

Frog CMS 0.9.5 - Cross-Site Request Forgery Add User Exploit Title:​​ Cross Site Request Forgery- Frog CMS Date: 31-03-2018 Exploit Author: Samrat Das Contact: http://twitter.com/SamratDas93 Website: https://securitywarrior9.blogspot.in/ Vendor Homepage: https://github.com/philippe/FrogCMS Versio...

CVE-2018-8908

An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user will be created with admin privileges. This happens...

CVE-2018-8908

An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user will be created with admin privileges. This happens...

Cross site request forgery (csrf)

An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user will be created with admin privileges. This happens...

CVE-2018-8908

An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user will be created with admin privileges. This happens...

CVE-2018-8908

An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user will be created with admin privileges. This happens...

CVE-2018-8908

The CVE-2018-8908 entry concerns Frog CMS 0.9.5 where the add user function at /admin/?/user/add is vulnerable to CSRF due to missing anti-CSRF tokens. A malicious page can trick a logged-in admin to perform an action that creates another admin user, potentially escalating privileges. Public refe...

PT-2018-18707

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue is related to the lack of an anti-CSRF token in state modification requests, specifically in the "add user" functionality. This allows a malicious user to craft an HTML page that can trick a victim...