Lucene search

K
Frog Cms ProjectFrog Cms0.9.5

9 matches found

CVE
CVE
added 2019/02/11 2:29 a.m.36 views

CVE-2018-20777

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.

5.4CVSS5.2AI score0.00206EPSS
CVE
CVE
added 2019/02/11 2:29 a.m.32 views

CVE-2018-20774

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.

5.4CVSS5.2AI score0.00206EPSS
CVE
CVE
added 2019/02/11 2:29 a.m.31 views

CVE-2018-20772

Frog CMS 0.9.5 allows PHP code execution via

7.2CVSS7.3AI score0.01114EPSS
CVE
CVE
added 2019/01/12 2:29 a.m.31 views

CVE-2019-6243

Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).

6.1CVSS6AI score0.0024EPSS
CVE
CVE
added 2019/02/11 2:29 a.m.29 views

CVE-2018-20773

Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional

7.2CVSS7.3AI score0.01114EPSS
CVE
CVE
added 2019/01/09 5:29 p.m.28 views

CVE-2018-20680

Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.

4.8CVSS4.9AI score0.00219EPSS
CVE
CVE
added 2019/02/11 2:29 a.m.28 views

CVE-2018-20775

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.

7.2CVSS7.3AI score0.01114EPSS
CVE
CVE
added 2019/02/11 2:29 a.m.28 views

CVE-2018-20776

Frog CMS 0.9.5 provides a directory listing for a /public request.

7.5CVSS7.5AI score0.00316EPSS
CVE
CVE
added 2019/02/11 2:29 a.m.27 views

CVE-2018-20778

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.

6.1CVSS5.9AI score0.0024EPSS