Vulnerabilities > Frog CMS Project > Frog CMS > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-02-11 | CVE-2018-20778 | Cross-site Scripting vulnerability in Frog CMS Project Frog CMS 0.9.5 admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element. | 4.3 |
| 2019-02-11 | CVE-2018-20776 | Information Exposure vulnerability in Frog CMS Project Frog CMS 0.9.5 Frog CMS 0.9.5 provides a directory listing for a /public request. | 5.0 |
| 2019-02-11 | CVE-2018-20775 | Code Injection vulnerability in Frog CMS Project Frog CMS 0.9.5 admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI. | 6.5 |
| 2019-02-11 | CVE-2018-20773 | Code Injection vulnerability in Frog CMS Project Frog CMS 0.9.5 Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines. | 6.5 |
| 2019-02-11 | CVE-2018-20772 | Code Injection vulnerability in Frog CMS Project Frog CMS 0.9.5 Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI. | 6.5 |
| 2019-01-12 | CVE-2019-6243 | Cross-site Scripting vulnerability in Frog CMS Project Frog CMS 0.9.5 Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI). | 4.3 |
| 2018-09-03 | CVE-2018-16373 | Unrestricted Upload of File with Dangerous Type vulnerability in Frog CMS Project Frog CMS 0.9.5 Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save. | 4.0 |
| 2018-05-15 | CVE-2018-11098 | Unrestricted Upload of File with Dangerous Type vulnerability in Frog CMS Project Frog CMS 0.9.5 An issue was discovered in Frog CMS 0.9.5. | 6.5 |
| 2018-03-31 | CVE-2018-8908 | Cross-Site Request Forgery (CSRF) vulnerability in Frog CMS Project Frog CMS 0.9.5 An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. | 6.8 |