Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2686▼ 84 respecto a la semana anterior

Críticas / altas1444▲ 301 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

18 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-1010235	Modificada	Media (5.4)	0.65%	—	Frog CMS Project Frog CMS	22/7/2019	17/6/2026	Frog CMS 1.1 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets.
CVE-2018-20778	Modificada	Media (6.1)	0.83%	—	Frog CMS Project Frog CMS	11/2/2019	17/6/2026	admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.
CVE-2018-20777	Modificada	Media (5.4)	0.64%	—	Frog CMS Project Frog CMS	11/2/2019	17/6/2026	Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.
CVE-2018-20776	Modificada	Alta (7.5)	1.5%	—	Frog CMS Project Frog CMS	11/2/2019	17/6/2026	Frog CMS 0.9.5 provides a directory listing for a /public request.
CVE-2018-20775	Modificada	Alta (7.2)	2.1%	—	Frog CMS Project Frog CMS	11/2/2019	17/6/2026	admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.
CVE-2018-20774	Modificada	Media (5.4)	0.64%	—	Frog CMS Project Frog CMS	11/2/2019	17/6/2026	Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.
CVE-2018-20773	Modificada	Alta (7.2)	2.1%	—	Frog CMS Project Frog CMS	11/2/2019	17/6/2026	Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.
CVE-2018-20772	Modificada	Alta (7.2)	2.1%	—	Frog CMS Project Frog CMS	11/2/2019	17/6/2026	Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.
CVE-2019-6243	Modificada	Media (6.1)	0.68%	—	Frog CMS Project Frog CMS	12/1/2019	17/6/2026	Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).
CVE-2018-20680	Modificada	Media (4.8)	0.58%	—	Frog CMS Project Frog CMS	9/1/2019	17/6/2026	Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.
CVE-2018-20448	Modificada	Media (5.4)	1.7%	—	Frog CMS Project Frog CMS	25/12/2018	17/6/2026	Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.
CVE-2018-16374	Modificada	Media (4.8)	0.64%	—	Frog CMS Project Frog CMS	3/9/2018	17/6/2026	Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.
CVE-2018-16373	Modificada	Media (4.9)	1.1%	—	Frog CMS Project Frog CMS	3/9/2018	17/6/2026	Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.
CVE-2018-11098	Modificada	Alta (7.2)	1.4%	—	Frog CMS Project Frog CMS	15/5/2018	17/6/2026	An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/file_manager/upload URI, a similar issue to CVE-2014-4912.
CVE-2018-9992	Modificada	Media (4.8)	0.52%	—	Frog CMS Project Frog CMS	11/4/2018	17/6/2026	Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen.
CVE-2018-9991	Modificada	Media (4.8)	0.52%	—	Frog CMS Project Frog CMS	11/4/2018	17/6/2026	Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter.
CVE-2018-8908	Modificada	Alta (8.8)	2.2%	—	Frog CMS Project Frog CMS	31/3/2018	17/6/2026	An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user will be created with admin privileges. This happens due to lack of an…
CVE-2014-4912	Modificada	Crítica (9.8)	8.1%	—	Frog CMS Project Frog CMS	22/3/2018	17/6/2026	An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.