CVE-2020-25872

Published October 29th, 2021

View on NVD ↗

CVSS v3

4.9

MEDIUM

CVSS v2

MEDIUM

Affected

PROJECT

Description

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.

philippe/FrogCMS

Frog CMS simplifies content management by offering an elegant user interface, flexible templating per page, simple user management and permissions, as well as the tools necessary for file management.

GitHub

160