RSS   Podatności dla 'Frog cms'   RSS

2019-07-22
 
CVE-2019-1010235

CWE-79
 
 
Frog CMS 1.1 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets.

 
2019-02-10
 
CVE-2018-20778

CWE-79
 
 
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.

 
 
CVE-2018-20777

CWE-79
 
 
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.

 
 
CVE-2018-20776

CWE-200
 
 
Frog CMS 0.9.5 provides a directory listing for a /public request.

 
 
CVE-2018-20775

CWE-94
 
 
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.

 
 
CVE-2018-20774

CWE-79
 
 
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.

 
 
CVE-2018-20773

CWE-94
 
 
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.

 
 
CVE-2018-20772

CWE-94
 
 
Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.

 
2019-01-11
 
CVE-2019-6243

CWE-79
 
 
Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).

 
2019-01-09
 
CVE-2018-20680

CWE-79
 
 
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.

 

Copyright 2024, cxsecurity.com

 

Back to Top