CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 17/09/2024 |
| CVE-2024-42627 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. | 12/08/2024 |
| CVE-2024-42626 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. | 12/08/2024 |
| CVE-2024-42625 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add | 12/08/2024 |
| CVE-2024-42624 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. | 12/08/2024 |
| CVE-2024-42623 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 | 12/08/2024 |
| CVE-2024-42632 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. | 12/08/2024 |
| CVE-2024-42631 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1. | 12/08/2024 |
| CVE-2024-42630 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file. | 12/08/2024 |
| CVE-2024-42629 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10. | 12/08/2024 |
| CVE-2024-42628 | HOCH8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3. | 12/08/2024 |
| CVE-2020-25872 | MITTEL4.9 | A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter. | 29/10/2021 |
| CVE-2021-26794 | KRITISCH9.8 | Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file. | 23/09/2021 |
| CVE-2018-19844 | MITTEL4.8 | FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. | 31/12/2018 |
| CVE-2018-16447 | HOCH8.8 | Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. | 04/09/2018 |
| CVE-2018-10806 | MITTEL5.4 | An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF. | 08/05/2018 |
| CVE-2018-10570 | MITTEL4.8 | Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field. | 30/04/2018 |