CVE-2024-57669

Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive information via the BackupController.java file...

CVE-2024-57669

CVE-2024-57669 affects Zrlog backup-sql-file.jar 3.0.31. A directory traversal vulnerability could allow a remote attacker to obtain sensitive information through the BackupController.java file. The CVSSv3.1 base score is 7.5 (HIGH) with network attack vector, no user interaction, no privileges r...

PT-2025-3533 · Zrlog · Zrlog

Name of the Vulnerable Software and Affected Versions: Zrlog backup-sql-file.jar version 3.0.31 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the BackupController.java file. Recommendations: For Zrlog backup-sql-file.jar version 3.0.31,...

ZrLog Directory Traversal Vulnerability

ZrLog is a blogging system developed using the Java language. A directory traversal vulnerability exists in ZrLog version 2.1.15, which stems from a lack of validity checking of paths in the admin.api.TemplateController deletion function when processing directory requests, and can be exploited by...

CVE-2020-27514

Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service DoS...

CVE-2020-27514

Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service DoS...

Directory traversal

Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service DoS...

CVE-2020-27514

Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service DoS...

ZrLog 路径遍历漏洞

ZrLog is a blogging system developed using the Java language. A directory traversal vulnerability exists in ZrLog version 2.1.15, which stems from a lack of validity checking of paths in the admin.api.TemplateController deletion function when processing directory requests, and can be exploited by...

CVE-2020-27514

Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service DoS...

CVE-2020-27514

CVE-2020-27514 affects ZrLog 2.1.15; the vulnerability is a directory traversal in the admin.api.TemplateController deletion function due to inadequate path validation, enabling remote attackers to delete arbitrary files and cause DoS. No patch/version remediation details are provided in the conn...

ZrLog Cross-Site Scripting Vulnerability (CNVD-2023-54438)

ZrLog is a blogging system developed using the Java language. A cross-site scripting XSS vulnerability exists in ZrLog version 2.1.3. An attacker can exploit this vulnerability to execute arbitrary code via the nickname parameter of the /post/addComment function...

CVE-2020-21052

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function...

CVE-2020-21052

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function...

Cross site scripting

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function...

CVE-2020-21052

CVE-2020-21052 affects zrlog v2.1.3. The vulnerability is a cross-site scripting (XSS) flaw in the /post/addComment functionality, exploitable via the nickname parameter to execute arbitrary code. The provided sources (NVD and related mirrors) identify the affected product/version and the input p...

CVE-2020-21052

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function...

ZrLog 跨站脚本漏洞

ZrLog is a blogging system developed using the Java language. A cross-site scripting XSS vulnerability exists in ZrLog version 2.1.3. An attacker can exploit this vulnerability to execute arbitrary code via the nickname parameter of the /post/addComment function...

ZrLog Command Execution Vulnerability

ZrLog is a blogging system developed using the Java language. A command execution vulnerability exists in ZrLog version 2.2.2, which can be exploited by an attacker to upload a JSP file to obtain a WebShell...

ZrLog Command Execution Vulnerability (CNVD-2021-95238)

ZrLog is a blogging system developed using the Java language. A command execution vulnerability exists in ZrLog version 2.2.2, which can be exploited by an attacker to execute any JAR file...