Rezultati pretraživanja za 'Proizvođač: zblogcn'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-7736 | 4.3 | In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or ZC_UPLOAD_FILETYPE parameter. NOTE: the software maintainer disputes that this is a vulnerability | 2024-08-05 07:15:43 | 2018-03-06 21:29:00 |
| CVE-2020-29176 | 6.8 | An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file. | 2021-12-06 13:25:00 | 2021-12-02 23:15:00 |
| CVE-2020-29177 | 6.4 | Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php. | 2021-12-04 02:52:00 | 2021-12-02 23:15:00 |
| CVE-2020-18268 | 5.8 | Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php." | 2021-06-15 16:31:00 | 2021-06-07 19:15:00 |
| CVE-2020-23352 | 5.0 | Z-BlogPHP 1.6.0 Valyria is affected by incorrect access control. PHP loose comparison and a magic hash can be used to bypass authentication. zb_user/plugin/passwordvisit/include.php:passwordvisit_input_password() uses loose comparison to authenticate | 2021-02-04 14:56:00 | 2021-01-27 16:15:00 |
| CVE-2018-18381 | 3.5 | Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type header during the uploading of image attachments. | 2019-09-23 18:14:00 | 2018-10-16 07:29:00 |
| CVE-2018-18842 | 6.8 | CSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 (Zero), which allows remote attackers to execute arbitrary PHP code. | 2019-01-09 19:44:00 | 2018-10-30 06:29:00 |
| CVE-2018-9153 | 6.5 | The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plugin_edit.php because of an unanchored regular expression, a different vulnerability than CVE | 2018-05-23 14:53:00 | 2018-04-16 09:58:00 |
| CVE-2018-9169 | 3.5 | Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter. The component must be accessed directly by an administrator, or through CSRF. | 2018-05-18 17:02:00 | 2018-04-16 09:58:00 |
| CVE-2018-8893 | 6.8 | Z-BlogPHP 1.5.1 Zero has CSRF in plugin_edit.php, resulting in the ability to execute arbitrary PHP code. | 2018-05-01 15:40:00 | 2018-03-31 22:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/3
Zapisa po stranici: