Name: CVE-2018-19844: Improper Neutralization of Input During Web Page Generation
Published: 2018-12-31T00:00:00.000Z
Keywords: CVE, CVE-2018-19844, CWE-79, CVSS 4.8, EPSS 0.00559

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.

CVSS Details

CVSS 3.1 Base Score: 4.8
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Oracle Solaris	—	Upgrade library/python/wcwidth-35 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-35 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-35 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-35 to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-34 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-35 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/colorama to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-37 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-web2 to version 8.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-35 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-37 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-37 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-34 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-34 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-34 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-37 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-37 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-appconf to version 1.0.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-37 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-34 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-34 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/xattr to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-35 to version 3.5.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth-27 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-34 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-appconf-27 to version 1.0.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-35 to version 3.5.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-35 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/oracle/odpi-230 to version 2.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial/hg-git-27 to version 0.8.12-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial to version 4.9.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-37 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-27 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-34 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-34 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-35 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-34 to version 3.4.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-37 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial/hg-git to version 0.8.12-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-27 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/hyperlink-35 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-34 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-37 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-27 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-37 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/rpdb-27 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-37 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-35 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-37 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-34 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-27 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-35 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-27 to version 5.1.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/cython-27 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-web2-27 to version 8.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-34 to version 1.4.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/pyparsing-27 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-27 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-27 to version 1.4.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-37 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-27 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-27 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-34 to version 5.1.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade developer/gcc-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-27 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-27 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-34 to version 3.4.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-27 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-37 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-27 to version 0.6.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth-34 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-27 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-27 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-34 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial-27 to version 4.9.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-35 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-37 to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-27 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-27 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-37 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-35 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/libxml2 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-35 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-37 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-35 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/astroid to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-34 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-34 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-35 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-35 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-27 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-34 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-27 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-37 to version 3.7.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-35 to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-34 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-34 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade text/texinfo to version 6.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-37 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-35 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-37 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-34 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-34 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-35 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-37 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth-37 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-37 to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/colorama-35 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-37 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-27 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-34 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-34 to version 0.6.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-35 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade compress/gzip to version 1.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-35 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4	Jan 19, 2021	Dec 31, 2018

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub