Show filters
22 Total Results
Displaying 11-20 of 22
Sort by:
Attacker Value
Unknown
CVE-2024-42629
Disclosure Date: August 12, 2024 (last updated August 14, 2024)
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.
0
Attacker Value
Unknown
CVE-2024-42628
Disclosure Date: August 12, 2024 (last updated August 14, 2024)
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.
0
Attacker Value
Unknown
CVE-2020-25872
Disclosure Date: October 29, 2021 (last updated February 23, 2025)
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.
0
Attacker Value
Unknown
CVE-2021-26794
Disclosure Date: September 23, 2021 (last updated February 23, 2025)
Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.
0
Attacker Value
Unknown
CVE-2018-19844
Disclosure Date: December 31, 2018 (last updated November 27, 2024)
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.
0
Attacker Value
Unknown
CVE-2018-16447
Disclosure Date: September 04, 2018 (last updated November 27, 2024)
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
0
Attacker Value
Unknown
CVE-2018-10806
Disclosure Date: May 08, 2018 (last updated November 26, 2024)
An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.
0
Attacker Value
Unknown
CVE-2018-10570
Disclosure Date: April 30, 2018 (last updated November 26, 2024)
Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.
0
Attacker Value
Unknown
CVE-2018-10321
Disclosure Date: April 24, 2018 (last updated November 26, 2024)
Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
0
Attacker Value
Unknown
CVE-2018-10320
Disclosure Date: April 24, 2018 (last updated November 26, 2024)
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.
0
