📦 Croogo

This vulnerability allows attackers to perform Host header injection in Croogo v3.0.2 via the feed.rss component. Attackers can manipulate HTTP Host headers to redirect users to malicious sites, perfo...

This vulnerability allows remote attackers to upload malicious web shell scripts through the file manager in Croogo CMS, leading to remote code execution. It affects Croogo 3.0.2 installations with th...

This path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files on the server by manipulating the 'edit-file' parameter. Attackers can access sensitive files like...