Frogcms
Vendor:
First CVE: Mar 22, 2018 · Active for 8 years
42
Total CVEs
More Total CVEs than 95% of tracked products
10.5
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 59% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Frogcms over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 22, 2018
8 years ago
Most Recent CVE
Sep 19, 2024
673 days ago
CVE Severity & Scoring
Frogcms42 CVEs
45%
50%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network42 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low42 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (21.4%)
Unknown0 (0.0%)
Required33 (78.6%)
Privileges Required
Low5 (11.9%)
High16 (38.1%)
None21 (50.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (42 CVEs).
42 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-4912CRITICAL An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation. | Mar 22, 2018 | 9.8 | 44 | NO | YES |
CVE-2018-8908HIGH An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to tr | Mar 31, 2018 | 8.8 | 38 | NO | YES |
CVE-2021-26794CRITICAL Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file. | Sep 23, 2021 | 9.8 | 29 | NO | NO |
CVE-2018-20448MEDIUM Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI. | Dec 25, 2018 | 5.4 | 29 | NO | YES |
CVE-2018-16447HIGH Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. | Sep 4, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-10321MEDIUM Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings. | Apr 24, 2018 | 4.8 | 27 | NO | YES |
CVE-2024-46085HIGH FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename | Sep 17, 2024 | 8.8 | 25 | NO | NO |
CVE-2024-46394HIGH FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add | Sep 19, 2024 | 8.8 | 24 | NO | NO |
CVE-2024-46362HIGH FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory | Sep 17, 2024 | 8.8 | 24 | NO | NO |
CVE-2024-42627HIGH FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. | Aug 12, 2024 | 8.8 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (42 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
9.5% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (42 CVEs).
Media Mentions
Signals from CVEs in this product scope (42 CVEs).
Top CNAs Publishing CVEs For Frogcms
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.1 | 1 | 5.4 | 0.7% | 0 | 0 |
| 0.9.5 | 41 | 7.0 | 1.0% | 0 | 4 |