NetSight
medium4.9

CVE-2020-25872

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GE…

Impact

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.

Affected products

VendorProductAffected versions
Frogcms ProjectFrogcms
Version 0.9.5

Weakness classification

References