Lucene search
K

68 matches found

CNNVD
CNNVD
added 2022/01/25 12:0 a.m.7 views

ForestBlog 跨站脚本漏洞

ForestBlog is an application. A personal blog. ForestBlog suffers from a cross-site scripting vulnerability that stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute JavaScript code on the client side...

6.1CVSS5.6AI score0.00223EPSS
Exploits1References2
NVD
NVD
added 2021/05/11 7:15 p.m.9 views

CVE-2020-18964

Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...

8.8CVSS0.00141EPSS
Exploits1References1
OSV
OSV
added 2021/05/11 7:15 p.m.2 views

CVE-2020-18964

Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...

8.8CVSS7.3AI score0.00141EPSS
Exploits1References1
Prion
Prion
added 2021/05/11 7:15 p.m.12 views

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...

6.8CVSS8.8AI score0.00141EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/05/11 6:37 p.m.10 views

CVE-2020-18964

Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...

8.9AI score0.00141EPSS
Exploits1References1
CVE
CVE
added 2021/05/11 6:37 p.m.31 views

CVE-2020-18964

CVE-2020-18964 is a Cross Site Request Forgery (CSRF) vulnerability in ForestBlog. The flaw exists in the Management background interface and could let a remote attacker gain privileges. Affected product: ForestBlog (latest version). Root cause: CSRF in the web UI. Impact (per sources): high conf...

8.8CVSS8.8AI score0.00141EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.3 views

ForestBlog 跨站请求伪造漏洞

ForestBlog is an application. A personal blog A cross-site request forgery vulnerability exists in ForestBlog. An attacker can exploit this vulnerability to gain privileges...

8.8CVSS7.8AI score0.00141EPSS
Exploits1References1
CNVD
CNVD
added 2020/10/27 12:0 a.m.1 views

Stored XSS Vulnerability in ForestBlog Frontend

ForestBlog is a simple SSM blogging system. A stored XSS vulnerability exists in the ForestBlog frontend that can be exploited by an attacker to obtain an administrator cookie...

6.2AI score
Exploits0
Rows per page
Query Builder