Lucene search
HistoryMay 22, 2024 - 5:15 a.m.
CVE-2024-31396
cve-2024-31396
code injection
a-blog cms
security vulnerability
administrator privilege
Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.
Affected configurations
Node
appleplea-blog_cmsRange<3.1.12
appleplea-blog_cmsRange<3.0.32
CNA Affected
[
{
"vendor": "appleple inc.",
"product": "a-blog cms Ver.3.1.x series",
"versions": [
{
"version": "prior to Ver.3.1.12",
"status": "affected"
}
]
},
{
"vendor": "appleple inc.",
"product": "a-blog cms Ver.3.0.x series",
"versions": [
{
"version": "prior to Ver.3.0.32",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2024-31396
2024-05-22 05:15:53
cvelist
cvelist
CVE-2024-31396
2024-05-22 04:35:42
jvn
jvn
JVN#70977403: Multiple vulnerabilities in a-blog cms
2024-04-10 00:00:00