Skip to content
Noroxi

frogcms project records

24 published records for vendor frogcms project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2021-26794
    39Monitor

    Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.

    CriticalCVSS 9.8No exploitEPSS 2%

    frogcms project · frogcmsSep 23, 2021

  • CVE-2018-16447
    35Monitor

    Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.

    HighCVSS 8.8No exploitEPSS 1%

    frogcms project · frogcmsSep 4, 2018

  • CVE-2024-42631
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-42632
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-46362
    35Monitor

    FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsSep 17, 2024

  • CVE-2024-46394
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsSep 19, 2024

  • CVE-2024-42626
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-46086
    35Monitor

    FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsSep 18, 2024

  • CVE-2024-42630
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-42627
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-42623
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-42624
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-42628
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-46085
    35Monitor

    FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsSep 17, 2024

  • CVE-2024-42625
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2024-42629
    35Monitor

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.

    HighCVSS 8.8No exploitEPSS 0%

    frogcms project · frogcmsAug 12, 2024

  • CVE-2018-10806
    21Monitor

    An issue was discovered in Frog CMS 0.9.5.

    MediumCVSS 5.4No exploitEPSS 0%

    frogcms project · frogcmsMay 8, 2018

  • CVE-2018-10321
    20Monitor

    Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.

    MediumCVSS 4.8Proof of conceptEPSS 2%

    frogcms project · frogcmsApr 24, 2018

  • CVE-2020-25872
    19Monitor

    A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traver

    MediumCVSS 4.9No exploitEPSS 1%

    frogcms project · frogcmsOct 29, 2021

  • CVE-2018-19844
    19Monitor

    FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10

    MediumCVSS 4.8No exploitEPSS 1%

    frogcms project · frogcmsDec 31, 2018

  • CVE-2018-10319
    19Monitor

    Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.

    MediumCVSS 4.8No exploitEPSS 1%

    frogcms project · frogcmsApr 23, 2018

  • CVE-2018-10318
    19Monitor

    Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.

    MediumCVSS 4.8No exploitEPSS 1%

    frogcms project · frogcmsApr 23, 2018

  • CVE-2018-10320
    19Monitor

    Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.

    MediumCVSS 4.8No exploitEPSS 1%

    frogcms project · frogcmsApr 23, 2018

  • CVE-2018-10570
    19Monitor

    Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.

    MediumCVSS 4.8No exploitEPSS 1%

    frogcms project · frogcmsApr 30, 2018