76 matches found
Design/Logic Flaw
A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attac...
CVE-2023-6887
CVE-2023-6887 affects saysky ForestBlog
PT-2023-32798 · Saysky · Sayski Forestblog
Name of the Vulnerable Software and Affected Versions: saysky ForestBlog up to 20220630 Description: A critical issue has been found in the Image Upload Handler component, affecting the /admin/upload/img file. The manipulation of the filename argument leads to unrestricted upload. This issue can ...
CVE-2023-6887: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attac...
ForestBlog 代码问题漏洞
ForestBlog is an application, a personal blog. An arbitrary file upload vulnerability exists in ForestBlog 20220630 and earlier versions, which stems from a lack of valid validation of the uploaded file by the parameter filename in the file /admin/upload/img. An attacker can exploit this...
CVE-2022-29020
ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar...
CVE-2022-29020
ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar...
CVE-2022-29020
ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar...
Default credentials
ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar...
ForestBlog 跨站脚本漏洞
ForestBlog is an application. A personal blog. A security vulnerability exists in ForestBlog that allows admin/profile/save userAvatar XSS during the addition of a user avatar...
CVE-2022-29020
ForestBlog exposes a stored XSS in the admin/profile/save userAvatar flow when adding a user avatar (up to 2022-02-16). The NVD entry lists CVSS v2 base 4.3 (MEDIUM) and CVSS v3.1 base 6.1 (MEDIUM) with network attack vector, user interaction required, and partial information disclosure/integrity...
CVE-2022-29020
ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar...
CVE-2022-29020: Improper Neutralization of Input During Web Page Generation
ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar...
ForestBlog Cross-Site Scripting Vulnerability
ForestBlog is an application. A personal blog. ForestBlog suffers from a cross-site scripting vulnerability that stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute JavaScript code on the client side...
CVE-2021-46034
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
CVE-2021-46034
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
Cross site scripting
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
CVE-2021-46033
In ForestBlog, as of 2021-12-28, File upload can bypass verification...