Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2731▲ 24 respecto a la semana anterior
Críticas / altas1467▲ 357 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)68▼ 458 respecto a la semana anterior
24 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 0.31% | — | Frogcms Project Frogcms | 19/9/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add | |
| Analizada | Alta (8.8) | 0.29% | — | Frogcms Project Frogcms | 18/9/2024 | 17/6/2026 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123 | |
| Analizada | Alta (8.8) | 0.32% | — | Frogcms Project Frogcms | 17/9/2024 | 17/6/2026 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory | |
| Analizada | Alta (8.8) | 0.24% | — | Frogcms Project Frogcms | 17/9/2024 | 17/6/2026 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename | |
| Modificada | Alta (8.8) | 0.29% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. | |
| Modificada | Alta (8.8) | 0.29% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. | |
| Analizada | Alta (8.8) | 0.22% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add | |
| Modificada | Alta (8.8) | 0.29% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. | |
| Modificada | Alta (8.8) | 0.29% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 | |
| Modificada | Alta (8.8) | 0.33% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. | |
| Modificada | Alta (8.8) | 0.33% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1. | |
| Modificada | Alta (8.8) | 0.29% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file. | |
| Analizada | Alta (8.8) | 0.22% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10. | |
| Modificada | Alta (8.8) | 0.29% | — | Frogcms Project Frogcms | 12/8/2024 | 17/6/2026 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3. | |
| Modificada | Media (4.9) | 1.2% | — | Frogcms Project Frogcms | 29/10/2021 | 17/6/2026 | A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter. | |
| Modificada | Crítica (9.8) | 1.6% | — | Frogcms Project Frogcms | 23/9/2021 | 17/6/2026 | Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file. | |
| Modificada | Media (4.8) | 0.56% | — | Frogcms Project Frogcms | 31/12/2018 | 17/6/2026 | FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. | |
| Modificada | Alta (8.8) | 0.71% | — | Frogcms Project Frogcms | 4/9/2018 | 17/6/2026 | Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. | |
| Modificada | Media (5.4) | 0.33% | — | Frogcms Project Frogcms | 8/5/2018 | 17/6/2026 | An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF. | |
| Modificada | Media (4.8) | 0.53% | — | Frogcms Project Frogcms | 30/4/2018 | 17/6/2026 | Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field. | |
| Modificada | Media (4.8) | 1.9% | — | Frogcms Project Frogcms | 24/4/2018 | 17/6/2026 | Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings. | |
| Modificada | Media (4.8) | 0.53% | — | Frogcms Project Frogcms | 24/4/2018 | 17/6/2026 | Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout. | |
| Modificada | Media (4.8) | 0.55% | — | Frogcms Project Frogcms | 24/4/2018 | 17/6/2026 | Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet. | |
| Modificada | Media (4.8) | 0.55% | — | Frogcms Project Frogcms | 24/4/2018 | 17/6/2026 | Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata. |