Vulnerabilities

TI-2024-30952 CVE-2024-46394 · GHSA-8hmj-pcqr-g8mp

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00314 Published 2024-09-19 No fix listed CWE-352

TI-2024-30889 CVE-2024-46086 · GHSA-q898-c98g-f82h

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF)…

HIGH 73

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-09-18 No fix listed CWE-352

TI-2024-30941 CVE-2024-46362 · GHSA-67qp-fprc-rhx4

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF)…

HIGH 73

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00323 Published 2024-09-17 No fix listed CWE-352

TI-2024-30888 CVE-2024-46085 · GHSA-cwj6-8v2q-g52w

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF)…

HIGH 73

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00237 Published 2024-09-17 No fix listed CWE-352

TI-2024-28553 CVE-2024-42632 · GHSA-62mf-rw5r-h5jq

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00329 Published 2024-08-12 No fix listed CWE-352

TI-2024-28552 CVE-2024-42631 · GHSA-86mq-3mw2-pcch

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00329 Published 2024-08-12 No fix listed CWE-352

TI-2024-28551 CVE-2024-42630 · GHSA-644m-h87w-v6x9

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF)…

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-08-12 No fix listed CWE-352

TI-2024-28550 CVE-2024-42629 · GHSA-28cx-5f85-hrh4

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.

HIGH 71

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00225 Published 2024-08-12 No fix listed CWE-352

TI-2024-28549 CVE-2024-42628 · GHSA-xw3w-rw7p-r5rj

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-08-12 No fix listed CWE-352

TI-2024-28548 CVE-2024-42627 · GHSA-ghv2-6cx6-8wrg

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF)…

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-08-12 No fix listed CWE-352

TI-2024-28547 CVE-2024-42626 · GHSA-9vqm-2gvw-hvf5

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-08-12 No fix listed CWE-352

TI-2024-28546 CVE-2024-42625 · GHSA-hq3w-6qhh-4pgr

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add

HIGH 71

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00225 Published 2024-08-12 No fix listed CWE-352

TI-2024-28545 CVE-2024-42624 · GHSA-xq9q-5j9m-x6xx

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-08-12 No fix listed CWE-352

TI-2024-28544 CVE-2024-42623 · GHSA-2qw7-j9xq-5qjq

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1

HIGH 73

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-08-12 No fix listed CWE-352

TI-2020-15857 CVE-2020-25872 · GHSA-c878-8ppw-6rjg

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5…

LOW 25

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01168 Published 2021-10-29 No fix listed CWE-22

TI-2021-08435 CVE-2021-26794 · GHSA-25gv-fvh4-vpcx

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute…

MEDIUM 45

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01603 Published 2021-09-23 No fix listed CWE-434

TI-2018-14059 CVE-2018-19844 · GHSA-9395-cxxr-x433

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled…

LOW 23

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2018-12-31 No fix listed CWE-79

TI-2018-11789 CVE-2018-16447 · GHSA-6cc5-pv32-wrmr

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.

LOW 39

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00709 Published 2018-09-04 No fix listed CWE-352

TI-2018-07637 CVE-2018-10806 · GHSA-v999-87h4-5mm6

An issue was discovered in Frog CMS 0.9.5.

LOW 24

An issue was discovered in Frog CMS 0.9.5.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00327 Published 2018-05-08 No fix listed CWE-352

TI-2018-07463 CVE-2018-10570 · GHSA-fv2j-x4xv-c6qc

Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.

LOW 23

Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00516 Published 2018-04-30 No fix listed CWE-79

TI-2018-07315 CVE-2018-10321 · GHSA-rwr9-5c74-r8gx

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.

LOW 26

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01843 Published 2018-04-24 No fix listed CWE-79

TI-2018-07314 CVE-2018-10320 · GHSA-6v37-667c-wmp8

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.

LOW 23

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00516 Published 2018-04-24 No fix listed CWE-79

TI-2018-07313 CVE-2018-10319 · GHSA-qpjm-vr3p-ccqf

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.

LOW 23

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0054 Published 2018-04-24 No fix listed CWE-79

TI-2018-07312 CVE-2018-10318 · GHSA-f8vj-9v6p-8f97

Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.

LOW 23

Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0054 Published 2018-04-24 No fix listed CWE-79

Vulnerabilities

Filters