CVE-2019-1010235

概要

参考情報

• somerandomshitwbu.blogspot.com/2019/01/stored-xss-in-frog-cms-open-source.html · Exploit

frog cms のその他の脆弱性

• CVE-2018-20778中 6.1admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.
• CVE-2018-20777中 5.4Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.
• CVE-2018-20776高 7.5Frog CMS 0.9.5 provides a directory listing for a /public request.
• CVE-2018-20775高 7.2admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting t…
• CVE-2018-20774中 5.4Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.