Vulnerabilities (CVE)

Vendor filter

Frog Cms Project Subscribe

Product filter

Frog Cms Subscribe

Filter

9 total CVE
CVE Vendors Products Updated CVSS
CVE-2018-20775 1 Frog Cms Project 1 Frog Cms 2019-02-11 6.5
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.
CVE-2018-20776 1 Frog Cms Project 1 Frog Cms 2019-02-11 5.0
Frog CMS 0.9.5 provides a directory listing for a /public request.
CVE-2018-20773 1 Frog Cms Project 1 Frog Cms 2019-02-11 6.5
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.
CVE-2018-20778 1 Frog Cms Project 1 Frog Cms 2019-02-11 4.3
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.
CVE-2018-20772 1 Frog Cms Project 1 Frog Cms 2019-02-11 6.5
Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.
CVE-2019-6243 1 Frog Cms Project 1 Frog Cms 2019-01-16 4.3
Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).
CVE-2018-16373 1 Frog Cms Project 1 Frog Cms 2018-10-25 4.0
Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.
CVE-2018-11098 1 Frog Cms Project 1 Frog Cms 2018-06-19 6.5
An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/file_manager/upload URI, a similar issue to CVE-2014-4912.
CVE-2018-8908 1 Frog Cms Project 1 Frog Cms 2018-05-09 6.8
An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user...