CVE-2025-2363 lenve VBlog ArticleController.java uploadImg path traversal

A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/sang/controller/ArticleController.java. The manipulation of the argument filename leads to path traversal. It is possible to launch the...

CVE-2025-2363

A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/sang/controller/ArticleController.java. The manipulation of the argument filename leads to path traversal. It is possible to launch the...

CVE-2025-2363 lenve VBlog ArticleController.java uploadImg path traversal

A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/sang/controller/ArticleController.java. The manipulation of the argument filename leads to path traversal. It is possible to launch the...

CVE-2025-2363

The CVE-2025-2363 entry concerns lenve VBlog up to 1.0.0. Affected is the function uploadImg in blogserver/src/main/java/org/sang/controller/ArticleController.java. The filename argument manipulation leads to path traversal, enabling a remote attack. Public exploit disclosure is noted, and the ve...

CVE-2025-2363: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/sang/controller/ArticleController.java. The manipulation of the argument filename leads to path traversal. It is possible to launch the...

VBlog Code Injection Vulnerability

VBlog is a multi-user blog management platform for lenve individual developers. A code injection vulnerability exists in VBlog 1.0.0 and earlier versions, which originates from cross-site scripting and could lead to a remote attacker executing arbitrary script in a user's browser...

PT-2025-11455

Name of the Vulnerable Software and Affected Versions lenve VBlog versions up to 1.0.0 Description A problematic issue was found in the addNewArticle function of the ArticleService.java file. The manipulation of the mdContent and htmlContent arguments leads to cross-site scripting. The attack can...

CVE-2025-2364: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/htmlContent leads to cross site...

PT-2025-11391

Name of the Vulnerable Software and Affected Versions lenve VBlog versions up to 1.0.0 Description A critical vulnerability has been found in the uploadImg function of the ArticleController.java file. The manipulation of the filename argument leads to path traversal, allowing for remote attacks...

WordPress Contus Vblog 1.0 File Upload

File upload vulnerability in WordPress Contus Vblog plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Wordpress Plugins - CONTUS VBLOG - Video Blogging Arbitrary File Upload

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2006-6586

Vulnerability: CVE-2006-6586 affects Vortex Blog (vBlog, aka C12) - a0.1_nonfunc. Root cause: multiple PHP remote file inclusion via the cfgProgDir parameter in admin/auth/secure.php and admin/auth/checklogin.php. Impact: allows remote attackers to execute arbitrary PHP code on affected systems (...

vBlog / C12 0.1 (cfgProgDir) Remote File Include Vulnerabilities

WwW.Deltahacking.NeT Priv8 Site WwW.Deltahacking.Ir Public Site Portal Name :Vortex Blog AKA vBlog Class = Remote File Inclusion ; Download =http://switch.dl.sourceforge.net/sourceforge/c12/C12a0.1nonfunc.zip Found by = Dr.Pantagon [email protected]...