PatchTheCVEfrog cms project vulnerabilities
Recent CVEs affecting frog cms project products. 18 tracked.
frog cms project has 18 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-07-22. Highest priority: CVE-2014-4912 (score 68/100).
- CVE-2019-6243 MEDIUM 6.1 DOWNGRADE Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).
- CVE-2019-1010235 MEDIUM 5.4 DOWNGRADE Frog CMS 1.1 is affected by: Cross Site Scripting (XSS)
- CVE-2018-9992 MEDIUM 4.8 DOWNGRADE Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/br
- CVE-2018-9991 MEDIUM 4.8 DOWNGRADE Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter.
- CVE-2018-8908 HIGH 8.8 DOWNGRADE An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5
- CVE-2018-20778 MEDIUM 6.1 DOWNGRADE admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute
- CVE-2018-20777 MEDIUM 5.4 DOWNGRADE Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.
- CVE-2018-20776 HIGH 7.5 DOWNGRADE Frog CMS 0.9.5 provides a directory listing for a /public request.
- CVE-2018-20775 HIGH 7.2 DOWNGRADE admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing
- CVE-2018-20774 MEDIUM 5.4 DOWNGRADE Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.
- CVE-2018-20773 HIGH 7.2 DOWNGRADE Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.
- CVE-2018-20772 HIGH 7.2 DOWNGRADE Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.
- CVE-2018-20680 MEDIUM 4.8 DOWNGRADE Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.
- CVE-2018-20448 MEDIUM 5.4 DOWNGRADE Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.
- CVE-2018-16374 MEDIUM 4.8 DOWNGRADE Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.
- CVE-2018-16373 MEDIUM 4.9 DOWNGRADE Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.
- CVE-2018-11098 HIGH 7.2 DOWNGRADE An issue was discovered in Frog CMS 0.9.5
- CVE-2014-4912 CRITICAL 9.8 DOWNGRADE An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.
FAQ
How do I fix frog cms project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is frog cms project being exploited right now?
None of the tracked frog cms project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which frog cms project CVE should I patch first?
CVE-2014-4912 currently ranks highest (68/100): An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation..