Cross site request forgery (csrf)

2018-02-0614:29:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

Z-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_del.php, as demonstrated by deleting files and directories.

CPENameOperatorVersion
z-blogphpeq1.5.1

CPE	Name	Operator	Version
	z-blogphp	eq	1.5.1

References

github.com/zblogcn/zblogphp/commit/c51da34a27798b5fe6d1cb5133a15da6a6384e43

github.com/zblogcn/zblogphp/issues/175