139 matches found
CVE-2025-29280
Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field of the backend system settings interface allows an attacker to insert and execute arbitrary malicious code...
PT-2025-16342 · Unknown · Perfreeblog
Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: The issue allows regular users to exploit an arbitrary file upload vulnerability in the attach component, enabling them to upload arbitrary files and execute code within them. Recommendations: For...
PerfreeBlog 安全漏洞
PerfreeBlog is PerfreeBlog open source, a java-based blog/CMS builder. A security vulnerability exists in PerfreeBlog version 4.0.11, which originates from the presence of arbitrary file uploads in the attach component and could lead to the execution of arbitrary code...
PerfreeBlog 安全漏洞
PerfreeBlog is PerfreeBlog open source a java-based development of blog/CMS site building platform. A security vulnerability exists in PerfreeBlog version 4.0.11, which originates from a stored cross-site script in the site name field of the background system settings interface...
CVE-2025-29281
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them...
CVE-2023-40825
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list...
CVE-2023-40825
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list...
Design/Logic Flaw
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list...
CVE-2023-40825
CVE-2023-40825 affects PerfreeBlog v3.1.2. A crafted plugin listed under admin/plugin/access/list enables a remote attacker to execute arbitrary code. The vulnerability originates from how plugins are loaded or validated in PerfreeBlog, allowing code execution with likely network access. Public r...
CVE-2023-40825: Unrestricted Upload of File with Dangerous Type
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list...
CVE-2023-40825
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list...
PerfreeBlog 代码问题漏洞
PerfreeBlog is a java-based blog/CMS builder. A security vulnerability exists in Perfree PerfreeBlog version v.3.1.2, which originates from a vulnerability that allows remote attackers to execute arbitrary code via a crafted plugin listed in admin/plugin/access/list...
CVE-2023-40825
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list...
CVE-2023-40825
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list...
CVE-2023-30333
An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-30333
CVE-2023-30333 affects PerfreeBlog v3.1.2. The arbitrary file upload vulnerability is in the /admin/ThemeController.java component and can lead to remote code execution via a crafted file. CVSS v3.1 base score 9.8 (CRITICAL) with network access, no privileges, and no user interaction required. Do...
PerfreeBlog 代码问题漏洞
PerfreeBlog is a java-based blog/CMS builder. A security vulnerability exists in PerfreeBlog version v3.1.2, which stems from the presence of an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code via a crafted file...
PT-2023-22640 · Unknown · Perfreeblog
Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 3.1.2 Description: An arbitrary file upload issue in the /admin/ThemeController.java component allows attackers to execute arbitrary code via a crafted file. Recommendations: For PerfreeBlog version 3.1.2, consider...