CVE-2018-20448

Description

References

• philippe/FrogCMS · Exploit
• exploit-db.com/exploits/46067 · Exploit

frog cms의 다른 취약점

• CVE-2019-1010235보통 5.4Frog CMS 1.1 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishi…
• CVE-2018-20778보통 6.1admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.
• CVE-2018-20777보통 5.4Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.
• CVE-2018-20776높음 7.5Frog CMS 0.9.5 provides a directory listing for a /public request.
• CVE-2018-20775높음 7.2admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting t…