彙總 frogcms_project 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
歷史漏洞主要涉及 CSRF與跨站腳本 等問題，部分漏洞可能導致 工作階段劫持，並影響 軟體部署與生產負載 相關場景。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2024-46394 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add | [email protected] | 8.8 | 0.29% | 2024-09-19 | 2024-09-25 |
| CVE-2024-46086 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123 | [email protected] | 8.8 | 0.27% | 2024-09-18 | 2024-09-25 |
| CVE-2024-46362 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory | [email protected] | 8.8 | 0.30% | 2024-09-17 | 2025-04-28 |
| CVE-2024-46085 | FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename | [email protected] | 8.8 | 0.22% | 2024-09-17 | 2025-04-28 |
| CVE-2024-42627 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. | [email protected] | 8.8 | 0.28% | 2024-08-12 | 2024-08-13 |
| CVE-2024-42626 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. | [email protected] | 8.8 | 0.28% | 2024-08-12 | 2024-08-13 |
| CVE-2024-42625 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add | [email protected] | 8.8 | 0.15% | 2024-08-12 | 2024-08-13 |
| CVE-2024-42624 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. | [email protected] | 8.8 | 0.28% | 2024-08-12 | 2024-08-15 |
| CVE-2024-42623 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 | [email protected] | 8.8 | 0.28% | 2024-08-12 | 2024-08-13 |
| CVE-2024-42632 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. | [email protected] | 8.8 | 0.31% | 2024-08-12 | 2024-08-13 |
| CVE-2024-42631 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1. | [email protected] | 8.8 | 0.31% | 2024-08-12 | 2024-08-13 |
| CVE-2024-42630 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file. | [email protected] | 8.8 | 0.32% | 2024-08-12 | 2024-08-13 |
| CVE-2024-42629 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10. | [email protected] | 8.8 | 0.21% | 2024-08-12 | 2024-08-13 |
| CVE-2024-42628 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3. | [email protected] | 8.8 | 0.29% | 2024-08-12 | 2024-08-15 |
| CVE-2020-25872 | A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter. | [email protected] | 4.9 | 1.13% | 2021-10-29 | 2024-11-21 |
| CVE-2021-26794 | Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file. | [email protected] | 9.8 | 1.55% | 2021-09-23 | 2024-11-21 |
| CVE-2018-19844 | FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. | [email protected] | 4.8 | 0.56% | 2018-12-31 | 2024-11-21 |
| CVE-2018-16447 | Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. | [email protected] | 8.8 | 0.71% | 2018-09-04 | 2024-11-21 |
| CVE-2018-10806 | An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF. | [email protected] | 5.4 | 0.34% | 2018-05-08 | 2024-11-21 |
| CVE-2018-10570 | Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field. | [email protected] | 4.8 | 0.53% | 2018-04-30 | 2024-11-21 |