76 matches found
CVE-2021-46034
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
CVE-2021-46034
ForestBlog is affected by a cross-site scripting (XSS) vulnerability exploitable via the nickname input box. The issue stems from insufficient validation of client-side data, allowing injected JavaScript to execute in the victim’s browser. Public references describe the vulnerability across multi...
CVE-2021-46033
In ForestBlog, as of 2021-12-28, File upload can bypass verification...
CVE-2021-46033
CVE-2021-46033 (ForestBlog) : Multiple sources confirm a vulnerability where file uploads bypass verification/authentication. The primary description states that, as of 2021-12-28, the file upload mechanism can bypass verification. Related entries describe the issue as a bypass of authentication ...
ForestBlog 跨站脚本漏洞
ForestBlog is an application. A personal blog. ForestBlog suffers from a cross-site scripting vulnerability that stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute JavaScript code on the client side...
ForestBlog 代码问题漏洞
ForestBlog is an application. A personal blog A security vulnerability exists in ForestBlog that stems from a security issue where file uploads bypass authentication...
CVE-2021-46034: Improper Neutralization of Input During Web Page Generation
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
CVE-2021-46033: Unrestricted Upload of File with Dangerous Type
In ForestBlog, as of 2021-12-28, File upload can bypass verification...
CVE-2020-18964
Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...
CVE-2020-18964
Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...
CVE-2020-18964
Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...
CVE-2020-18964
CVE-2020-18964 is a Cross Site Request Forgery (CSRF) vulnerability in ForestBlog. The flaw exists in the Management background interface and could let a remote attacker gain privileges. Affected product: ForestBlog (latest version). Root cause: CSRF in the web UI. Impact (per sources): high conf...
CVE-2020-18964: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...
