Vulnerabilities

TI-2019-16031 CVE-2019-1010235 · GHSA-5cjm-75p4-jv8c

Cross-site scripting in Frog CMS

LOW 25

Frog CMS 1.1 is affected by: Cross Site Scripting (XSS).

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00649 Published 2019-07-22 No fix listed CWE-79

TI-2018-14749 CVE-2018-20778 · GHSA-6hgh-w5p3-6qp9

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file…

LOW 29

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00826 Published 2019-02-11 No fix listed CWE-79

TI-2018-14748 CVE-2018-20777 · GHSA-hm82-wr2f-7vvq

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.

LOW 25

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00637 Published 2019-02-11 No fix listed CWE-79

TI-2018-14747 CVE-2018-20776 · GHSA-jghv-mf7c-vmm8

Frog CMS 0.9.5 provides a directory listing for a /public request.

LOW 36

Frog CMS 0.9.5 provides a directory listing for a /public request.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01514 Published 2019-02-11 No fix listed CWE-200

TI-2018-14746 CVE-2018-20775 · GHSA-j2hq-64gw-xw35

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new…

LOW 36

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02107 Published 2019-02-11 No fix listed CWE-94

TI-2018-14745 CVE-2018-20774 · GHSA-jr4g-gr9p-33rx

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.

LOW 25

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00637 Published 2019-02-11 No fix listed CWE-79

TI-2018-14744 CVE-2018-20773 · GHSA-fm46-fm6f-wvf5

Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.

LOW 36

Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02107 Published 2019-02-11 No fix listed CWE-94

TI-2018-14743 CVE-2018-20772 · GHSA-cm2w-6f5f-6c2h

Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.

LOW 36

Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02107 Published 2019-02-11 No fix listed CWE-94

TI-2019-04441 CVE-2019-6243 · GHSA-54v4-6rg7-jjmf

Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).

LOW 28

Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2019-01-12 No fix listed CWE-79

TI-2018-14685 CVE-2018-20680 · GHSA-32jc-f729-2rgf

Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.

LOW 23

Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00583 Published 2019-01-09 No fix listed CWE-79

TI-2018-14490 CVE-2018-20448 · GHSA-fqx2-5ff7-q7wj

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.

LOW 28

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01677 Published 2018-12-25 No fix listed CWE-79

TI-2018-11735 CVE-2018-16374 · GHSA-f765-qh69-h7vc

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.

LOW 23

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0064 Published 2018-09-03 No fix listed CWE-79

TI-2018-11734 CVE-2018-16373 · GHSA-8v48-9cmx-xcmc

Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.

LOW 25

Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01071 Published 2018-09-03 No fix listed CWE-434

TI-2018-07882 CVE-2018-11098 · GHSA-67pw-fcv6-74xx

An issue was discovered in Frog CMS 0.9.5.

LOW 34

An issue was discovered in Frog CMS 0.9.5.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01368 Published 2018-05-15 No fix listed CWE-434

TI-2018-07097 CVE-2018-9992 · GHSA-j87g-xh8x-q5cc

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the…

LOW 23

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00516 Published 2018-04-11 No fix listed CWE-79

TI-2018-07096 CVE-2018-9991 · GHSA-8pxp-j6vx-2j5x

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter.

LOW 23

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00516 Published 2018-04-11 No fix listed CWE-79

TI-2018-06446 CVE-2018-8908 · GHSA-5733-3xh5-v4mq

An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5.

MEDIUM 42

An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02228 Published 2018-03-31 No fix listed CWE-352

TI-2014-04044 CVE-2014-4912 · GHSA-8gqp-wcpc-j87c

An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.

MEDIUM 53

An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08061 Published 2018-03-22 No fix listed CWE-434

Vulnerabilities

Filters