Vulnerabilities for Frog cms (...) - CXSECURITY.COM

Vulnerabilities for 'Frog cms'

2019-07-22

CVE-2019-1010235

CWE-79

Frog CMS 1.1 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets.

2019-02-10

CVE-2018-20778

CWE-79

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.

CVE-2018-20777

CWE-79

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.

CVE-2018-20776

CWE-200

Frog CMS 0.9.5 provides a directory listing for a /public request.

CVE-2018-20775

CWE-94

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.

CVE-2018-20774

CWE-79

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.

CVE-2018-20773

CWE-94

Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.

CVE-2018-20772

CWE-94

Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.

2019-01-11

CVE-2019-6243

CWE-79

Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).

2019-01-09

CVE-2018-20680

CWE-79

Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.

Copyright 2024, cxsecurity.com