Lucene search
+L

145 matches found

Vulnrichment
Vulnrichment
•added 2024/08/12 12:00 a.m.•16 views

CVE-2024-42625

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/add...

7.5AI score0.00225EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/12 12:00 a.m.•3 views

CVE-2024-42624: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/delete/10...

8.8CVSS5.8AI score0.00295EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/12 12:00 a.m.•2 views

CVE-2024-42625: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/add...

8.8CVSS5.8AI score0.00225EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/12 12:00 a.m.•17 views

FrogCms 安全漏洞

FrogCms is an HTTP server. A security vulnerability exists in FrogCms version v0.9.5, which originated via /admin/? /snippet/edit/3 was found to contain a cross-site request forgery vulnerability...

8.8CVSS6.8AI score0.00295EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/12 12:00 a.m.•4 views

CVE-2024-42629: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/edit/10...

8.8CVSS5.8AI score0.00225EPSS
SaveExploits1References1
Check Point Advisories
Check Point Advisories
•added 2021/11/07 12:00 a.m.•38 views

FrogCMS SentCMS Remote Code Execution (CVE-2021-26794)

A remote code execution vulnerability exists in FrogCMS SentCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS9.5AI score0.01603EPSS
SaveExploits1
CNVD
CNVD
•added 2021/11/02 12:00 a.m.•110 views

FrogCMS Path Traversal Vulnerability

FrogCms is an HTTP server. A path traversal vulnerability exists in FrogCMS, which stems from a vulnerability in the FileManagerController.php function in FrogCMS version 0.9.5, which can be exploited to perform a directory traversal attack via the GET request urlencode parameter...

4.9CVSS5.1AI score0.01168EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/29 8:15 p.m.•18 views

CVE-2020-25872

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter...

4.9CVSS5.8AI score0.01168EPSS
SaveExploits1References1
NVD
NVD
•added 2021/10/29 8:15 p.m.•36 views

CVE-2020-25872

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter...

4.9CVSS0.01168EPSS
SaveExploits1References1
Prion
Prion
•added 2021/10/29 8:15 p.m.•25 views

Directory traversal

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter...

4CVSS5AI score0.01168EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/10/29 7:11 p.m.•63 views

CVE-2020-25872

Affected product: FrogCMS 0.9.5. The vulnerability is in FileManagerController.php and allows a directory traversal attack via a GET request urlencode parameter. This is a path traversal issue in the Web UI/file handling code, enabling an attacker to access files outside the intended root. The co...

4.9CVSS5AI score0.01168EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/10/29 12:00 a.m.•17 views

FrogCms 路径遍历漏洞

FrogCms is an HTTP server. A path traversal vulnerability exists in FrogCMS, which stems from a vulnerability in the FileManagerController.php function in FrogCMS version 0.9.5, which can be exploited to perform a directory traversal attack via the GET request urlencode parameter...

4.9CVSS5.5AI score0.01168EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/29 12:00 a.m.•3 views

CVE-2020-25872: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter...

4.9CVSS5.8AI score0.01168EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/09/28 12:00 a.m.•47 views

FrogCMS File Upload Vulnerability

FrogCMS an open source content management system. FrogCMS file upload vulnerability exists, the vulnerability is due to product design flaws do not limit the file upload, an attacker can use this vulnerability to upload malicious files to remotely execute arbitrary code...

9.8CVSS9.8AI score0.01603EPSS
SaveExploits1References1
NVD
NVD
•added 2021/09/23 5:15 p.m.•45 views

CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

9.8CVSS0.01603EPSS
SaveExploits1References1
OSV
OSV
•added 2021/09/23 5:15 p.m.•16 views

CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

9.8CVSS7.6AI score0.01603EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/09/23 3:15 p.m.•37 views

CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

9.9AI score0.01603EPSS
SaveExploits1References1
CVE
CVE
•added 2021/09/23 3:15 p.m.•68 views

CVE-2021-26794

CVE-2021-26794 affects FrogCMS SentCMS v0.9.5, allowing remote code execution via a crafted PHP file uploaded through upload.php. Multiple connected sources (RH Red Hat, CVE lists, CP advisories, CNVD/CNNVD equivalents, and CVE records) describe it as a privilege escalation leading to arbitrary c...

9.8CVSS9.8AI score0.01603EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/23 12:00 a.m.•3 views

CVE-2021-26794: Unrestricted Upload of File with Dangerous Type

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

9.8CVSS6.4AI score0.01603EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/09/23 12:00 a.m.•18 views

FrogCMS 代码问题漏洞

FrogCMS an open source content management system. FrogCMS file upload vulnerability exists, the vulnerability is due to product design flaws do not limit the file upload, an attacker can use this vulnerability to upload malicious files to remotely execute arbitrary code...

9.8CVSS8.7AI score0.01603EPSS
SaveExploits1References2
Rows per page
Query Builder