frogcms project kayıtları

frogcms project üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

24 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2021-26794İstismar yok	Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.frogcms project · frogcms · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%1,6	23 Eyl 2021
35İzleyin	CVE-2018-16447İstismar yok	Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,7	4 Eyl 2018
35İzleyin	CVE-2024-42631İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	12 Ağu 2024
35İzleyin	CVE-2024-42632İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	12 Ağu 2024
35İzleyin	CVE-2024-46362İstismar yok	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directoryfrogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	17 Eyl 2024
35İzleyin	CVE-2024-46394İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/addfrogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	19 Eyl 2024
35İzleyin	CVE-2024-42626İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	12 Ağu 2024
35İzleyin	CVE-2024-46086İstismar yok	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Eyl 2024
35İzleyin	CVE-2024-42630İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	12 Ağu 2024
35İzleyin	CVE-2024-42627İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	12 Ağu 2024
35İzleyin	CVE-2024-42623İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	12 Ağu 2024
35İzleyin	CVE-2024-42624İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	12 Ağu 2024
35İzleyin	CVE-2024-42628İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	12 Ağu 2024
35İzleyin	CVE-2024-46085İstismar yok	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/renamefrogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	17 Eyl 2024
35İzleyin	CVE-2024-42625İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/addfrogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	12 Ağu 2024
35İzleyin	CVE-2024-42629İstismar yok	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.frogcms project · frogcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	12 Ağu 2024
21İzleyin	CVE-2018-10806İstismar yok	An issue was discovered in Frog CMS 0.9.5.frogcms project · frogcms · CWE-79 XSS CSRF	Orta5,4	—	%0,3	8 May 2018
20İzleyin	CVE-2018-10321Kavram kanıtı	Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.frogcms project · frogcms · CWE-79 XSS	Orta4,8	—	%1,9	24 Nis 2018
19İzleyin	CVE-2020-25872İstismar yok	A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traverfrogcms project · frogcms · CWE-22 Yol geçişi	Orta4,9	—	%1,2	29 Eki 2021
19İzleyin	CVE-2018-19844İstismar yok	FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10frogcms project · frogcms · CWE-79 XSS	Orta4,8	—	%0,6	31 Ara 2018
19İzleyin	CVE-2018-10319İstismar yok	Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.frogcms project · frogcms · CWE-79 XSS	Orta4,8	—	%0,6	23 Nis 2018
19İzleyin	CVE-2018-10318İstismar yok	Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.frogcms project · frogcms · CWE-79 XSS	Orta4,8	—	%0,6	23 Nis 2018
19İzleyin	CVE-2018-10320İstismar yok	Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.frogcms project · frogcms · CWE-79 XSS	Orta4,8	—	%0,5	23 Nis 2018
19İzleyin	CVE-2018-10570İstismar yok	Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.frogcms project · frogcms · CWE-79 XSS	Orta4,8	—	%0,5	30 Nis 2018

CVE-2021-26794
39İzleyin
Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Dosya yükleme
frogcms project · frogcms23 Eyl 2021
CVE-2018-16447
35İzleyin
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms4 Eyl 2018
CVE-2024-42631
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-42632
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-46362
35İzleyin
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms17 Eyl 2024
CVE-2024-46394
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms19 Eyl 2024
CVE-2024-42626
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-46086
35İzleyin
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms18 Eyl 2024
CVE-2024-42630
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-42627
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-42623
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-42624
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-42628
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-46085
35İzleyin
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms17 Eyl 2024
CVE-2024-42625
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2024-42629
35İzleyin
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
frogcms project · frogcms12 Ağu 2024
CVE-2018-10806
21İzleyin
An issue was discovered in Frog CMS 0.9.5.
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
- CSRF
frogcms project · frogcms8 May 2018
CVE-2018-10321
20İzleyin
Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
OrtaCVSS 4,8Kavram kanıtıEPSS %2
- XSS
frogcms project · frogcms24 Nis 2018
CVE-2020-25872
19İzleyin
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traver
OrtaCVSS 4,9İstismar yokEPSS %1
- Yol geçişi
frogcms project · frogcms29 Eki 2021
CVE-2018-19844
19İzleyin
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
frogcms project · frogcms31 Ara 2018
CVE-2018-10319
19İzleyin
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
frogcms project · frogcms23 Nis 2018
CVE-2018-10318
19İzleyin
Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
frogcms project · frogcms23 Nis 2018
CVE-2018-10320
19İzleyin
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
frogcms project · frogcms23 Nis 2018
CVE-2018-10570
19İzleyin
Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
frogcms project · frogcms30 Nis 2018