Lucene search

CVE-2018-9153

🗓️ 16 Apr 2018 09:12:58Reported by [email protected]Type

The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plugin_edit.php

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
Prion	Cross site request forgery (csrf)	16 Apr 201809:58	–	prion
Prion	Cross site request forgery (csrf)	31 Mar 201822:29	–	prion
Cvelist	CVE-2018-9153	15 Apr 201814:00	–	cvelist
Cvelist	CVE-2018-8893	31 Mar 201822:00	–	cvelist
CVE	CVE-2018-9153	16 Apr 201809:58	–	cve
CVE	CVE-2018-8893	31 Mar 201822:29	–	cve
NVD	CVE-2018-8893	31 Mar 201822:29	–	nvd

Nvd

Node

zblogcn z-blogphpMatch1.5.1

Source	Link
xz	www.xz.aliyun.com/t/2277

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Apr 2018 09:58Current

8.2High risk

Vulners AI Score8.2

CVSS26.5

CVSS37.2

EPSS0.00682

CWE-434