Frog CMS 0.9.5
Approved changes feed: RSS · Atom
cpe:2.3:a:frog_cms_project:frog_cms:0.9.5:*:*:*:*:*:*:*part: a version: 0.9.5 update: *
| Vendor | Frog Cms Project (b971eb70-3d33-5b1d-bd07-af8f21fb6ee8) |
|---|---|
| Product | Frog Cms (a8d3d66d-3683-596d-b37c-cd5f50f260c1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/philippe/frogcms |
purl2cpe | 2026-06-01 10:15:01.184898 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42630 |
vulnerable | 2026-06-08 06:45:46.814816 |
Details available
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.
Published: 2024-08-12T00:00:00.000Z
Updated: 2024-08-13T14:50:25.515Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6243 |
vulnerable | 2026-06-08 05:14:10.399473 |
Details available
Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).
Published: 2019-01-12T02:00:00.000Z
Updated: 2024-08-04T20:16:24.650Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9992 |
vulnerable | 2026-06-08 05:12:08.410102 |
Details available
Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen.
Published: 2018-04-11T06:00:00.000Z
Updated: 2024-08-05T07:32:00.694Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9991 |
vulnerable | 2026-06-08 05:12:08.409845 |
Details available
Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter.
Published: 2018-04-11T06:00:00.000Z
Updated: 2024-08-05T07:32:00.580Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8908 |
vulnerable | 2026-06-08 05:12:06.686080 |
Details available
An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user will be created with admin privileges. This happens due to lack of an anti-CSRF token in state modification requests.
Published: 2018-03-31T22:00:00.000Z
Updated: 2024-08-05T07:10:47.124Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20778 |
vulnerable | 2026-06-08 05:11:27.902646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20777 |
vulnerable | 2026-06-08 05:11:27.902402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20776 |
vulnerable | 2026-06-08 05:11:27.902144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20775 |
vulnerable | 2026-06-08 05:11:27.901862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20774 |
vulnerable | 2026-06-08 05:11:27.901333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20773 |
vulnerable | 2026-06-08 05:11:27.900977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20772 |
vulnerable | 2026-06-08 05:11:27.900617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20680 |
vulnerable | 2026-06-08 05:11:27.726944 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20448 |
vulnerable | 2026-06-08 05:11:27.256890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16374 |
vulnerable | 2026-06-08 05:11:04.775651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16373 |
vulnerable | 2026-06-08 05:11:04.775159 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11098 |
vulnerable | 2026-06-08 05:10:37.886466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4912 |
vulnerable | 2026-06-08 05:05:46.411771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.