Frog CMS Project
Frog CMS Project Frog CMS: vulnerabilidades y CVE
Frog CMS Project Frog CMS tiene 18 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE18
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-1010235 | Media (5.4) | 0.65% | — | 22 jul 2019 | Frog CMS 1.1 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets. |
| CVE-2018-20778 | Media (6.1) | 0.83% | — | 11 feb 2019 | admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element. |
| CVE-2018-20777 | Media (5.4) | 0.64% | — | 11 feb 2019 | Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field. |
| CVE-2018-20776 | Alta (7.5) | 1.5% | — | 11 feb 2019 | Frog CMS 0.9.5 provides a directory listing for a /public request. |
| CVE-2018-20775 | Alta (7.2) | 2.1% | — | 11 feb 2019 | admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI. |
| CVE-2018-20774 | Media (5.4) | 0.64% | — | 11 feb 2019 | Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field. |
| CVE-2018-20773 | Alta (7.2) | 2.1% | — | 11 feb 2019 | Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines. |
| CVE-2018-20772 | Alta (7.2) | 2.1% | — | 11 feb 2019 | Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI. |
| CVE-2019-6243 | Media (6.1) | 0.68% | — | 12 ene 2019 | Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI). |
| CVE-2018-20680 | Media (4.8) | 0.58% | — | 9 ene 2019 | Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field. |
| CVE-2018-20448 | Media (5.4) | 1.7% | — | 25 dic 2018 | Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI. |
| CVE-2018-16374 | Media (4.8) | 0.64% | — | 3 sept 2018 | Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings. |
| CVE-2018-16373 | Media (4.9) | 1.1% | — | 3 sept 2018 | Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save. |
| CVE-2018-11098 | Alta (7.2) | 1.4% | — | 15 may 2018 | An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/file_manager/upload URI, a similar issue to CVE-2014-4912. |
| CVE-2018-9992 | Media (4.8) | 0.52% | — | 11 abr 2018 | Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen. |
| CVE-2018-9991 | Media (4.8) | 0.52% | — | 11 abr 2018 | Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter. |
| CVE-2018-8908 | Alta (8.8) | 2.2% | — | 31 mar 2018 | An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once… |
| CVE-2014-4912 | Crítica (9.8) | 8.1% | — | 22 mar 2018 | An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation. |