Frogcms Project
Frogcms Project Frogcms: vulnerabilidades y CVE
Frogcms Project Frogcms tiene 24 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE24
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-46394 | Alta (8.8) | 0.31% | — | 19 sept 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add |
| CVE-2024-46086 | Alta (8.8) | 0.29% | — | 18 sept 2024 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123 |
| CVE-2024-46362 | Alta (8.8) | 0.32% | — | 17 sept 2024 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory |
| CVE-2024-46085 | Alta (8.8) | 0.24% | — | 17 sept 2024 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename |
| CVE-2024-42627 | Alta (8.8) | 0.29% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. |
| CVE-2024-42626 | Alta (8.8) | 0.29% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. |
| CVE-2024-42625 | Alta (8.8) | 0.22% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add |
| CVE-2024-42624 | Alta (8.8) | 0.29% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. |
| CVE-2024-42623 | Alta (8.8) | 0.29% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 |
| CVE-2024-42632 | Alta (8.8) | 0.33% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. |
| CVE-2024-42631 | Alta (8.8) | 0.33% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1. |
| CVE-2024-42630 | Alta (8.8) | 0.29% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file. |
| CVE-2024-42629 | Alta (8.8) | 0.22% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10. |
| CVE-2024-42628 | Alta (8.8) | 0.29% | — | 12 ago 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3. |
| CVE-2020-25872 | Media (4.9) | 1.2% | — | 29 oct 2021 | A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter. |
| CVE-2021-26794 | Crítica (9.8) | 1.6% | — | 23 sept 2021 | Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file. |
| CVE-2018-19844 | Media (4.8) | 0.56% | — | 31 dic 2018 | FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. |
| CVE-2018-16447 | Alta (8.8) | 0.71% | — | 4 sept 2018 | Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. |
| CVE-2018-10806 | Media (5.4) | 0.33% | — | 8 may 2018 | An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with… |
| CVE-2018-10570 | Media (4.8) | 0.53% | — | 30 abr 2018 | Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field. |
| CVE-2018-10321 | Media (4.8) | 1.9% | — | 24 abr 2018 | Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings. |
| CVE-2018-10320 | Media (4.8) | 0.53% | — | 24 abr 2018 | Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout. |
| CVE-2018-10319 | Media (4.8) | 0.55% | — | 24 abr 2018 | Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet. |
| CVE-2018-10318 | Media (4.8) | 0.55% | — | 24 abr 2018 | Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata. |