CVE-2018-17079

CVE-2018-17079 affects ZRLOG 2.0.1 and involves a stored XSS vulnerability in the nickname field of the comment area. The provided documents confirm the issue but do not provide any remediation steps within the supplied content. Exploitation status and in-the-wild details are not described in the...

CVE-2018-17079

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

CVE-2018-17079: Improper Neutralization of Input During Web Page Generation

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

ZrLog Cross-Site Scripting Vulnerability

ZrLog is a blogging system developed using the Java language. A cross-site scripting vulnerability exists in the file upload feature in ZrLog version 2.0.3. A remote attacker can exploit this vulnerability by injecting arbitrary web script or HTML using a specially crafted attached/file/ pathname...

Sql injection

An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...

Cross site scripting

An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname...

CVE-2018-17420

An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...

CVE-2018-17421

An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname...

CVE-2018-17420

An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...

CVE-2018-17421

An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname...

CVE-2018-17421

An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname...

CVE-2018-17420

Summary: CVE-2018-17420 affects ZrLog 2.0.3 with a SQL injection in the article management search box via the keywords parameter. The vulnerability is demonstrated in the NVD entry (CVSS v3 base 7.2, HIGH; vectors: NETWORK/LOW for exploitability, requires HIGH privileges, no user interaction). Th...

CVE-2018-17420

An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...

CVE-2018-17421

ZrLog 2.0.3 contains a stored XSS vulnerability in the file upload area, exploitable via a crafted attached/file/ pathname. This CVE (CVE-2018-17421) is supported by multiple references (e.g., CNVD-2019-13264 and NVD entry), and the vulnerability description explicitly states the stored XSS condi...

CVE-2018-17421: Improper Neutralization of Input During Web Page Generation

An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname...

CVE-2018-17420: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...