Path traversal

2018-02-0816:29:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.3%

Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zb_system/function/lib/upload.php.

CPENameOperatorVersion
z-blogphpeq1.5.1

CPE	Name	Operator	Version
	z-blogphp	eq	1.5.1

References

github.com/zblogcn/zblogphp/issues/176