CVE-2023-30333: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file...

CVE-2023-30333

An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file...

CVE-2023-29643

Cross Site Scripting XSS vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function...

Cross site scripting

Cross Site Scripting XSS vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function...

PT-2023-22351 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 3.1.2 Description: The issue is a Cross Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via the Post function. This enables attackers to potentially inject malicious scripts into the websit...

CVE-2023-29643: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function...

PerfreeBlog 跨站脚本漏洞

PerfreeBlog is a java-based blog/CMS builder. A security vulnerability exists in PerfreeBlog version 3.1.2, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary code via the Post function...

CVE-2023-29643

Cross Site Scripting XSS vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function...

CVE-2023-29643

Cross Site Scripting XSS vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function...

CVE-2023-29643

Cross Site Scripting XSS vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function...

CVE-2023-29643

PerfreeBlog 3.1.2 is affected by a Cross Site Scripting (XSS) vulnerability that allows arbitrary code execution via the Post function. The CVE records indicate an impact at low confidentiality and integrity, no availability impact, with CVSS v3.1 base score 5.4 (Network attack vector, low attack...

CVE-2023-27757

An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file...

Design/Logic Flaw

An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file...

CVE-2023-27757: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file...

CVE-2023-27757

CVE-2023-27757 concerns PerfreeBlog v3.1.1, where an arbitrary file upload flaw in the /admin/user/uploadImg component allows an attacker to execute arbitrary code via a crafted JPG file. The vulnerability is treated as critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), with high impact on...

PerfreeBlog 代码问题漏洞

PerfreeBlog is a java-based blog/CMS builder. A security vulnerability exists in PerfreeBlog v3.1.1, which originates from an arbitrary file upload vulnerability found in the /admin/user/uploadImg component. An attacker can exploit this vulnerability to execute arbitrary code via a specially...

CVE-2023-27757

An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file...

CVE-2023-27757

An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file...

PT-2023-21324

Name of the Vulnerable Software and Affected Versions PerfreeBlog version 3.1.1 Description The issue is related to an arbitrary file upload vulnerability in the /admin/user/uploadImg component. This allows attackers to execute arbitrary code via a crafted JPG file. Recommendations For PerfreeBlo...