136 matches found
CVE-2020-19005
zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly...
Design/Logic Flaw
zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly...
CVE-2020-19005
Summary: The issue CVE-2020-19005 affects zrlog v2.1.0 and stems from a faulty permission check that allows an admin session to enable other, unauthorized users to directly download the database backup file. Affected software: zrlog 2.1.0 (Java-based blog/CMS). Vulnerability details: Permission v...
CVE-2020-19005
zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly...
CVE-2020-19005: Incorrect Authorization
zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly...
ZrLog is vulnerable to XSS
ZrLog is a blog/CMS program developed in Java. ZrLog suffers from an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...
Stored Cross-Site Scripting Vulnerability in ZrLog
ZrLog is a blogging program developed using Java. A stored cross-site scripting vulnerability exists in ZrLog. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...
SQL Injection Vulnerability in ZrLog
ZrLog is a blogging program developed using Java. ZrLog suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
Arbitrary File Download Vulnerability in ZrLog V2.1.1
ZrLog is a blogging program developed using Java. ZrLog V2.1.1 suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to download any file on the server via a constructed path...
Command Execution Vulnerability in ZrLog CMS
ZrLog is a blog/CMS program developed in Java , with simple , easy to use , componentized , low memory consumption and so on. ZrLog CMS has a command execution vulnerability that can be exploited by attackers to execute arbitrary commands...
Stored Cross-Site Scripting Vulnerability in ZrLog Frontend
ZrLog is a blog/CMS program developed in Java. A stored cross-site scripting vulnerability exists in the ZrLog frontend. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...
CVE-2019-16643
An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the articleedit area...
CVE-2019-16643
An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the articleedit area...
Cross site scripting
An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the articleedit area...
CVE-2019-16643
CVE-2019-16643 affects ZrLog 2.1.1 with a stored XSS vulnerability in the article_edit area. Connected documents confirm the issue across multiple feeds (NVD, Red Hat, vendor/public listings). The available descriptions consistently describe a stored XSS condition, but there are no details here o...
CVE-2019-16643
An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the articleedit area...
CVE-2019-16643: Improper Neutralization of Input During Web Page Generation
An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the articleedit area...
CVE-2018-17079
An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...