CVE-2018-17420

Summary: CVE-2018-17420 affects ZrLog 2.0.3 with a SQL injection in the article management search box via the keywords parameter. The vulnerability is demonstrated in the NVD entry (CVSS v3 base 7.2, HIGH; vectors: NETWORK/LOW for exploitability, requires HIGH privileges, no user interaction). Th...

CVE-2018-17421

ZrLog 2.0.3 contains a stored XSS vulnerability in the file upload area, exploitable via a crafted attached/file/ pathname. This CVE (CVE-2018-17421) is supported by multiple references (e.g., CNVD-2019-13264 and NVD entry), and the vulnerability description explicitly states the stored XSS condi...