Published: 08/02/2022 Updated: 13/07/2023

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 580

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Although PHP issued warnings and the upload function returned `false`, the original file (that could contain a malicious payload) was kept on the disk. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
blog project blog

m1k1o's Blog versions 13 and below suffer from an authenticated remote code execution vulnerability ...

CWE-252 https://github.com/m1k1o/blog/security/advisories/GHSA-wmqj-5v54-24x4 https://github.com/m1k1o/blog/commit/6f5e59f1401c4a3cf2e518aa85b231ea14e8a2ef http://packetstormsecurity.com/files/167235/m1k1os-Blog-1.3-Remote-Code-Execution.html https://nvd.nist.gov https://packetstormsecurity.com/files/167235/m1k1os-Blog-1.3-Remote-Code-Execution.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-23626

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect