Frogcms_project Frogcms
24 CVEs affecting Frogcms_project Frogcms. Latest disclosed: 2024-09-19. Critical: 1, High: 15.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26794 | Critical | 9.8 | 2021-09-23 | Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file. |
CVE-2024-46394 | High | 8.8 | 2024-09-19 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add |
CVE-2024-46086 | High | 8.8 | 2024-09-18 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123 |
CVE-2024-46362 | High | 8.8 | 2024-09-17 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory |
CVE-2024-46085 | High | 8.8 | 2024-09-17 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename |
CVE-2024-42627 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. |
CVE-2024-42626 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. |
CVE-2024-42625 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add |
CVE-2024-42624 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. |
CVE-2024-42623 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 |
CVE-2024-42632 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. |
CVE-2024-42631 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1. |
CVE-2024-42630 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file. |
CVE-2024-42629 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10. |
CVE-2024-42628 | High | 8.8 | 2024-08-12 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3. |
CVE-2018-16447 | High | 8.8 | 2018-09-04 | Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. |
CVE-2018-10806 | Medium | 5.4 | 2018-05-08 | An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/f… |
CVE-2020-25872 | Medium | 4.9 | 2021-10-29 | A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GE… |
CVE-2018-19844 | Medium | 4.8 | 2018-12-31 | FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. |
CVE-2018-10570 | Medium | 4.8 | 2018-04-30 | Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field. |