314 matches found
CVE-2026-87727
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
EUVD-2026-76020
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
CVE-2026-87727
a-blog cms (by appleple inc.) versions 3.2.33 and earlier contain a path traversal vulnerability (CWE-22) that allows a remote unauthenticated attacker to read or delete arbitrary files on the server. The vulnerability is only exploitable when the form setting "Attaching files to emails addressed...
CVE-2026-87727
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
CVE-2026-87727
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
a-blog cms vulnerable to path traversal
Overview a-blog cms provided by appleple inc. contains the following vulnerability. Path traversal CWE-22 - CVE-2026-87727 You are affected by this vulnerability only when "Attaching files to emails addressed to the administrator" is enabled in the form settings. hibiki moriyama of STNet,...
CVE-2026-87727: Improper Limitation of a Pathname to a Restricted Directory
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
PT-2026-89810
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
PT-2026-65905
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
CVE-2025-65337: Improper Neutralization of Input During Web Page Generation
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
EUVD-2025-210531
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
CVE-2025-65337
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
CVE-2025-65337
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
CVE-2022-23916
Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows ...
CVE-2022-26619
Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function...
Exploit for CVE-2025-15495
CVE-2025-15495 - Arbitrary File Upload Leading to Remote Code...
EUVD-2016-2283
Malware in sbrugna...
EUVD-2021-13048
Malware in sbrugna...