CVE-2026-6650

Z-BlogPHP 1.7.5 contains a vulnerability in the App::UnPack function of /zb_users/plugin/AppCentre/app_upload.php (ZBA File Handler) that allows unrestricted file upload. Impact is described as unrestricted upload with network/remote initiation; exploitation is publicly available per the CVE entr...

PT-2018-17698

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.5.1 Description The issue allows for CSRF via "zb users/plugin/AppCentre/app del.php", which can be exploited to delete files and directories. Recommendations For Z-BlogPHP version 1.5.1, consider restricting access to the...