136 matches found
ZrLog 代码问题漏洞
ZrLog is a blogging system developed using the Java language. A command execution vulnerability exists in ZrLog version 2.2.2, which can be exploited by an attacker to upload a JSP file to obtain a WebShell...
ZrLog Cross-Site Scripting Vulnerability (CNVD-2021-46876)
ZrLog is a blog/CMS program developed in Java that is minimalist, easy to use, componentized, and has a low memory footprint. A cross-site scripting vulnerability exists in ZrLog version 2.1.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the userName and email...
CVE-2020-18066
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...
CVE-2020-18066
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...
Cross site scripting
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...
CVE-2020-18066
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...
CVE-2020-18066
ZrLog 2.1.0 is affected by a Cross‑Site Scripting (XSS) vulnerability exploitable via the userName and email parameters in post/addComment. The connected sources confirm the same CVE-2020-18066 details across multiple feeds (NVD, RH, CNVD, etc.), but do not provide additional exploitation steps, ...
CVE-2020-18066: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...
ZrLog 跨站脚本漏洞
ZrLog is a blog/CMS program developed in Java that is minimalist, easy to use, componentized, and has a low memory footprint. A cross-site scripting vulnerability exists in ZrLog version 2.1.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the userName and email...
ZrLog Cross-Site Scripting Vulnerability (CNVD-2021-43499)
ZrLog is a blogging system developed using the Java language. A security vulnerability exists in ZrLog 2.1.3, which can be exploited by remote attackers to inject arbitrary web scripts and stolen administrator cookies via the nickname parameter and gain access to the admin panel...
CVE-2020-21316
A Cross-site scripting XSS vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary web script and stolen administrator cookies via the nickname parameter and gain access to the admin panel...
CVE-2020-21316
A Cross-site scripting XSS vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary web script and stolen administrator cookies via the nickname parameter and gain access to the admin panel...
Cross site scripting
A Cross-site scripting XSS vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary web script and stolen administrator cookies via the nickname parameter and gain access to the admin panel...
CVE-2020-21316
A Cross-site scripting XSS vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary web script and stolen administrator cookies via the nickname parameter and gain access to the admin panel...
CVE-2020-21316
CVE-2020-21316 describes an XSS vulnerability in ZrLog 2.1.3’s comment section. The issue allows remote attackers to inject arbitrary scripts via the nickname parameter and potentially steal administrator cookies, gaining access to the admin panel. Affected component: ZrLog 2.1.3; vulnerability t...
CVE-2020-21316: Improper Neutralization of Input During Web Page Generation
A Cross-site scripting XSS vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary web script and stolen administrator cookies via the nickname parameter and gain access to the admin panel...
ZrLog 跨站脚本漏洞
ZrLog is a blogging system developed using the Java language. A security vulnerability exists in ZrLog 2.1.3, which can be exploited by remote attackers to inject arbitrary web scripts and stolen administrator cookies via the nickname parameter and gain access to the admin panel...
Arbitrary File Deletion Vulnerability in ZrLog CMS
ZrLog is a blogging program developed using Java. ZrLog CMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to compromise the integrity of the system...
zrlog privilege checking vulnerability
ZrLog is a blog/CMS program developed in Java that is minimalist, easy to use, componentized, and has a low memory footprint. A privilege check vulnerability exists in zrlog 2.1.0. An attacker can log in with an administrator account and then use another unauthenticated user to download a databas...