frog cms project kayıtları
frog cms project üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2014-4912Kavram kanıtı | An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.frog cms project · frog cms · CWE-434 | Kritik9,8 | — | %8,0 | 22 Mar 2018 |
36İzleyin | CVE-2018-8908Kavram kanıtı | An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5.frog cms project · frog cms · CWE-352 | Yüksek8,8 | — | %2,2 | 31 Mar 2018 |
30İzleyin | CVE-2018-20776İstismar yok | Frog CMS 0.9.5 provides a directory listing for a /public request.frog cms project · frog cms · CWE-200 | Yüksek7,5 | — | %1,5 | 10 Şub 2019 |
29İzleyin | CVE-2018-20775İstismar yok | admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting tfrog cms project · frog cms · CWE-94 | Yüksek7,2 | — | %2,1 | 10 Şub 2019 |
29İzleyin | CVE-2018-20772İstismar yok | Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.frog cms project · frog cms · CWE-94 | Yüksek7,2 | — | %2,1 | 10 Şub 2019 |
29İzleyin | CVE-2018-20773İstismar yok | Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.frog cms project · frog cms · CWE-94 | Yüksek7,2 | — | %2,1 | 10 Şub 2019 |
28İzleyin | CVE-2018-11098İstismar yok | An issue was discovered in Frog CMS 0.9.5.frog cms project · frog cms · CWE-434 | Yüksek7,2 | — | %1,3 | 14 May 2018 |
24İzleyin | CVE-2018-20778İstismar yok | admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.frog cms project · frog cms · CWE-79 | Orta6,1 | — | %0,8 | 10 Şub 2019 |
24İzleyin | CVE-2019-6243İstismar yok | Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).frog cms project · frog cms · CWE-79 | Orta6,1 | — | %0,6 | 11 Oca 2019 |
22İzleyin | CVE-2018-20448Kavram kanıtı | Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.frog cms project · frog cms · CWE-79 | Orta5,4 | — | %1,6 | 25 Ara 2018 |
21İzleyin | CVE-2019-1010235İstismar yok | Frog CMS 1.1 is affected by: Cross Site Scripting (XSS).frog cms project · frog cms · CWE-79 | Orta5,4 | — | %0,6 | 22 Tem 2019 |
21İzleyin | CVE-2018-20774İstismar yok | Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.frog cms project · frog cms · CWE-79 | Orta5,4 | — | %0,6 | 10 Şub 2019 |
21İzleyin | CVE-2018-20777İstismar yok | Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.frog cms project · frog cms · CWE-79 | Orta5,4 | — | %0,6 | 10 Şub 2019 |
19İzleyin | CVE-2018-16373Kavram kanıtı | Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.frog cms project · frog cms · CWE-434 | Orta4,9 | — | %1,0 | 2 Eyl 2018 |
19İzleyin | CVE-2018-16374İstismar yok | Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.frog cms project · frog cms · CWE-79 | Orta4,8 | — | %0,6 | 2 Eyl 2018 |
19İzleyin | CVE-2018-20680İstismar yok | Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.frog cms project · frog cms · CWE-79 | Orta4,8 | — | %0,5 | 9 Oca 2019 |
19İzleyin | CVE-2018-9991İstismar yok | Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter.frog cms project · frog cms · CWE-79 | Orta4,8 | — | %0,5 | 11 Nis 2018 |
19İzleyin | CVE-2018-9992İstismar yok | Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen.frog cms project · frog cms · CWE-79 | Orta4,8 | — | %0,5 | 11 Nis 2018 |
- CVE-2014-491241Planlayın
An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.
KritikCVSS 9,8Kavram kanıtıEPSS %8frog cms project · frog cms22 Mar 2018
- CVE-2018-890836İzleyin
An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5.
YüksekCVSS 8,8Kavram kanıtıEPSS %2frog cms project · frog cms31 Mar 2018
- CVE-2018-2077630İzleyin
Frog CMS 0.9.5 provides a directory listing for a /public request.
YüksekCVSS 7,5İstismar yokEPSS %1frog cms project · frog cms10 Şub 2019
- CVE-2018-2077529İzleyin
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting t
YüksekCVSS 7,2İstismar yokEPSS %2frog cms project · frog cms10 Şub 2019
- CVE-2018-2077229İzleyin
Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.
YüksekCVSS 7,2İstismar yokEPSS %2frog cms project · frog cms10 Şub 2019
- CVE-2018-2077329İzleyin
Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.
YüksekCVSS 7,2İstismar yokEPSS %2frog cms project · frog cms10 Şub 2019
- CVE-2018-1109828İzleyin
An issue was discovered in Frog CMS 0.9.5.
YüksekCVSS 7,2İstismar yokEPSS %1frog cms project · frog cms14 May 2018
- CVE-2018-2077824İzleyin
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.
OrtaCVSS 6,1İstismar yokEPSS %0frog cms project · frog cms10 Şub 2019
- CVE-2019-624324İzleyin
Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).
OrtaCVSS 6,1İstismar yokEPSS %0frog cms project · frog cms11 Oca 2019
- CVE-2018-2044822İzleyin
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.
OrtaCVSS 5,4Kavram kanıtıEPSS %1frog cms project · frog cms25 Ara 2018
- CVE-2019-101023521İzleyin
Frog CMS 1.1 is affected by: Cross Site Scripting (XSS).
OrtaCVSS 5,4İstismar yokEPSS %0frog cms project · frog cms22 Tem 2019
- CVE-2018-2077421İzleyin
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.
OrtaCVSS 5,4İstismar yokEPSS %0frog cms project · frog cms10 Şub 2019
- CVE-2018-2077721İzleyin
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.
OrtaCVSS 5,4İstismar yokEPSS %0frog cms project · frog cms10 Şub 2019
- CVE-2018-1637319İzleyin
Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.
OrtaCVSS 4,9Kavram kanıtıEPSS %1frog cms project · frog cms2 Eyl 2018
- CVE-2018-1637419İzleyin
Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.
OrtaCVSS 4,8İstismar yokEPSS %0frog cms project · frog cms2 Eyl 2018
- CVE-2018-2068019İzleyin
Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.
OrtaCVSS 4,8İstismar yokEPSS %0frog cms project · frog cms9 Oca 2019
- CVE-2018-999119İzleyin
Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter.
OrtaCVSS 4,8İstismar yokEPSS %0frog cms project · frog cms11 Nis 2018
- CVE-2018-999219İzleyin
Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen.
OrtaCVSS 4,8İstismar yokEPSS %0frog cms project · frog cms11 Nis 2018