VendorsFrogCMS Projectfrogcms0.9.5
Vulnerabilities

FrogCMS Project FrogCMS 0.9.5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

24CVEs
CVE-2021-26794
Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.
Published 2021-09-23 · Modified
9.8EPSS 0.016
CVE-2018-16447
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
Published 2018-09-04 · Modified
8.8EPSS 0.007
CVE-2024-42632
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.
Published 2024-08-12 · Modified
8.8EPSS 0.003
CVE-2024-42631
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.
Published 2024-08-12 · Modified
8.8EPSS 0.003
CVE-2024-46362
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory
Published 2024-09-17 · Analyzed
8.8EPSS 0.003
CVE-2024-46394
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
Published 2024-09-19 · Analyzed
8.8EPSS 0.003
CVE-2024-46086
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
Published 2024-09-18 · Analyzed
8.8EPSS 0.003
CVE-2024-42630
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.
Published 2024-08-12 · Modified
8.8EPSS 0.003
CVE-2024-42623
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1
Published 2024-08-12 · Modified
8.8EPSS 0.003
CVE-2024-42624
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.
Published 2024-08-12 · Modified
8.8EPSS 0.003
CVE-2024-42626
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.
Published 2024-08-12 · Modified
8.8EPSS 0.003
CVE-2024-42627
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.
Published 2024-08-12 · Modified
8.8EPSS 0.003
CVE-2024-42628
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.
Published 2024-08-12 · Modified
8.8EPSS 0.003
CVE-2024-46085
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename
Published 2024-09-17 · Analyzed
8.8EPSS 0.002
CVE-2024-42625
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add
Published 2024-08-12 · Analyzed
8.8EPSS 0.002
CVE-2024-42629
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.
Published 2024-08-12 · Analyzed
8.8EPSS 0.002
CVE-2018-10806
An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.
Published 2018-05-08 · Modified
5.4EPSS 0.003
CVE-2020-25872
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.
Published 2021-10-29 · Modified
4.9EPSS 0.012
CVE-2018-10321
Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
Published 2018-04-24 · Modified
4.81 PoCEPSS 0.019
CVE-2018-19844
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.
Published 2018-12-31 · Modified
4.8EPSS 0.006
CVE-2018-10318
Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.
Published 2018-04-24 · Modified
4.8EPSS 0.006
CVE-2018-10319
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.
Published 2018-04-24 · Modified
4.8EPSS 0.006
CVE-2018-10570
Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.
Published 2018-04-30 · Modified
4.8EPSS 0.005
CVE-2018-10320
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.
Published 2018-04-24 · Modified
4.8EPSS 0.005