Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
z-blogphp vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2020-29176
An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows malicious users to execute arbitrary code via a crafted JPG file.
Zblogcn Z-blogphp 1.6.1.2100
5.8
CVSSv2
CVE-2018-6656
Z-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_del.php, as demonstrated by deleting files and directories.
Zblogcn Z-blogphp 1.5.1
6.5
CVSSv2
CVE-2018-9153
The plugin upload component in Z-BlogPHP 1.5.1 allows remote malicious users to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plugin_edit.php because of an unanchored regular expression, a different vulnerability than CVE-2018-8893. The componen...
Zblogcn Z-blogphp 1.5.1
4.3
CVSSv2
CVE-2018-10680
Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings --> Basic setting --> Website title" and enters an XSS payload via the zb_system/cmd.php ZC_BLOG_NAME parameter. NOTE: the vendor di...
Zblogcn Z-blogphp 1.5.2
6.4
CVSSv2
CVE-2020-29177
Z-BlogPHP v1.6.1.2100 exists to contain an arbitrary file deletion vulnerability via \app_del.php.
Zblogcn Z-blogphp 1.6.1.2100
5
CVSSv2
CVE-2020-23352
Z-BlogPHP 1.6.0 Valyria is affected by incorrect access control. PHP loose comparison and a magic hash can be used to bypass authentication. zb_user/plugin/passwordvisit/include.php:passwordvisit_input_password() uses loose comparison to authenticate, which can be bypassed via ma...
Zblogcn Z-blogphp 1.6.0
3.5
CVSSv2
CVE-2018-18381
Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type header during the uploading of image attachments.
Zblogcn Z-blogphp 1.5.2.1935
6.8
CVSSv2
CVE-2018-8893
Z-BlogPHP 1.5.1 Zero has CSRF in plugin_edit.php, resulting in the ability to execute arbitrary PHP code.
Zblogcn Z-blogphp 1.5.1
6.8
CVSSv2
CVE-2018-18842
CSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 (Zero), which allows remote malicious users to execute arbitrary PHP code.
Zblogcn Z-blogphp 1.5.2.1935\\(zero\\)
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700
CVE-2022-48689
CVE-2024-27956
CVE-2023-6363
SQL
NULL pointer dereference
CVE-2023-41830
CVE-2015-2051
arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2