Frogcms Project: >> Frogcms Security Vulnerabilities
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.
CVSS Score
8.8
EPSS Score
0.0
Published
2024-08-12
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.
CVSS Score
8.8
EPSS Score
0.0
Published
2024-08-12
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.
CVSS Score
8.8
EPSS Score
0.001
Published
2024-08-12
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.
CVSS Score
8.8
EPSS Score
0.0
Published
2024-08-12
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.
CVSS Score
4.9
EPSS Score
0.004
Published
2021-10-29
Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.
CVSS Score
9.8
EPSS Score
0.009
Published
2021-09-23
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-12-31
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-09-04
An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.
CVSS Score
5.4
EPSS Score
0.001
Published
2018-05-08
Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-04-30