CVE-2018-20775 admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.
HighCVSS 7.2
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| frog cms project frog cms | = 0.9.5 | No fix listed |
References
- github.com exploit third-party-advisory