CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 17/09/2024 |
| CVE-2024-42627 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. | 12/08/2024 |
| CVE-2024-42626 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. | 12/08/2024 |
| CVE-2024-42625 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add | 12/08/2024 |
| CVE-2024-42624 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. | 12/08/2024 |
| CVE-2024-42623 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 | 12/08/2024 |
| CVE-2024-42632 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. | 12/08/2024 |
| CVE-2024-42631 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1. | 12/08/2024 |
| CVE-2024-42630 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file. | 12/08/2024 |
| CVE-2024-42629 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10. | 12/08/2024 |
| CVE-2024-42628 | 높음8.8 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3. | 12/08/2024 |
| CVE-2020-25872 | 보통4.9 | A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter. | 29/10/2021 |
| CVE-2021-26794 | 심각9.8 | Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file. | 23/09/2021 |
| CVE-2018-19844 | 보통4.8 | FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. | 31/12/2018 |
| CVE-2018-16447 | 높음8.8 | Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. | 04/09/2018 |
| CVE-2018-10806 | 보통5.4 | An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF. | 08/05/2018 |
| CVE-2018-10570 | 보통4.8 | Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field. | 30/04/2018 |