Vendor

Frogcms Project

Products

CVEs

Across products

Status

Private

Products

Frogcms
24 CVEs

Recent CVEs

View all 24 CVEs →

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-26794	FrogCMS FrogCMS	Cri	0.64	9.8	0.02	Sep 23, 2021	Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.
CVE-2024-46394	Frogcms Project Frogcms	Hig	0.57	8.8	0.00	Sep 19, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
CVE-2024-46086	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Sep 18, 2024	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
CVE-2024-46362	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Sep 17, 2024	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory
CVE-2024-46085	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Sep 17, 2024	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename
CVE-2024-42627	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.
CVE-2024-42626	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.
CVE-2024-42625	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add
CVE-2024-42624	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.
CVE-2024-42623	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1
CVE-2024-42632	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.
CVE-2024-42631	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.
CVE-2024-42630	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.
CVE-2024-42629	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.
CVE-2024-42628	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Aug 12, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.
CVE-2018-16447	Frogcms Project Frogcms	Hig	0.57	8.8	0.01	Sep 4, 2018	Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
CVE-2018-10806	Frogcms Project Frogcms	Med	0.35	5.4	0.00	May 8, 2018	An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.
CVE-2018-10321	CMS Frogss Frog CMS	Med	0.34	4.8	0.02	Apr 24, 2018	Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
CVE-2020-25872	FrogCMS FrogCMS	Med	0.32	4.9	0.01	Oct 29, 2021	A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.
CVE-2018-19844	CMS Frogss Frog CMS	Med	0.31	4.8	0.01	Dec 31, 2018	FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.

CVE-2021-26794CriSep 23, 2021
FrogCMS
FrogCMS
risk 0.64cvss 9.8epss 0.02
Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.
CVE-2024-46394HigSep 19, 2024
Frogcms Project
Frogcms
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
CVE-2024-46086HigSep 18, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
CVE-2024-46362HigSep 17, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory
CVE-2024-46085HigSep 17, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename
CVE-2024-42627HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.
CVE-2024-42626HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.
CVE-2024-42625HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add
CVE-2024-42624HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.
CVE-2024-42623HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1
CVE-2024-42632HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.
CVE-2024-42631HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.
CVE-2024-42630HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.
CVE-2024-42629HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.
CVE-2024-42628HigAug 12, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.
CVE-2018-16447HigSep 4, 2018
Frogcms Project
Frogcms
risk 0.57cvss 8.8epss 0.01
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
CVE-2018-10806MedMay 8, 2018
Frogcms Project
Frogcms
risk 0.35cvss 5.4epss 0.00
An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.
CVE-2018-10321MedApr 24, 2018
CMS Frogss
Frog CMS
risk 0.34cvss 4.8epss 0.02
Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
CVE-2020-25872MedOct 29, 2021
FrogCMS
FrogCMS
risk 0.32cvss 4.9epss 0.01
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.
CVE-2018-19844MedDec 31, 2018
CMS Frogss
Frog CMS
risk 0.31cvss 4.8epss 0.01
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.

View all 24 CVEs →