zrlog vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.

Zrlog Zrlog 2.1.0

4.3

CVSSv2

An issue exists in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area.

Zrlog Zrlog 2.0.1

4.3

CVSSv2

A Cross-site scripting (XSS) vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote malicious users to inject arbitrary web script and stolen administrator cookies via the nickname parameter and gain access to the admin panel.

Zrlog Zrlog 2.1.3

NA

Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote malicious users to delete arbitrary files and cause a denial of service (DoS).

Zrlog Zrlog 2.1.5

3.5

CVSSv2

An issue exists in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit area.

Zrlog Zrlog 2.0.1

4.3

CVSSv2

Cross Site Scripting vulnerability in ZrLog 2.1.0 via the (1) userName and (2) email parameters in post/addComment.

Zrlog Zrlog 2.1.0

NA

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote malicious user to execute arbitrary code via the nickame parameter of the /post/addComment function.

Zrlog Zrlog 2.1.3

6.5

CVSSv2

An issue exists in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter.

Zrlog Zrlog 2.0.3

4.3

CVSSv2

An issue exists in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname.

Zrlog Zrlog 2.0.3

7.5

CVSSv2

A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, upload the JSP file to get a WebShell

Zrlog Zrlog 2.2.2

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook