Lucene search
+L

9 matches found

CNVD
CNVD
•added 2021/12/06 12:00 a.m.•38 views

Z-BlogPHP arbitrary file deletion vulnerability

Z-BlogPHP is an open source PHP-based blogging system from the Z-blog community.Z-BlogPHP is vulnerable to an arbitrary file deletion vulnerability that stems from the inclusion of an arbitrary file deletion vulnerability via appdel.php. No detailed vulnerability details are currently available...

9.1CVSS3.4AI score0.00961EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/02 11:15 p.m.•27 views

Arbitrary file deletion

Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \appdel.php...

6.4CVSS9.2AI score0.00961EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/12/02 12:00 a.m.•18 views

Z-BlogPHP 安全漏洞

Z-BlogPHP is an open source PHP-based blogging system from the Z-blog community.Z-BlogPHP is vulnerable to an arbitrary file deletion vulnerability that stems from the inclusion of an arbitrary file deletion vulnerability via appdel.php. No detailed vulnerability details are currently available...

9.1CVSS5.7AI score0.00961EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/02 12:00 a.m.•4 views

CVE-2020-29177: Undefined Security Weakness

Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \appdel.php...

9.1CVSS5.9AI score0.00961EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/06 2:29 p.m.•20 views

Cross site request forgery (csrf)

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

5.8CVSS6.6AI score0.00501EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2018/02/06 2:00 p.m.•3 views

CVE-2018-6656

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

7.1CVSS0.00501EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2018/02/06 2:00 p.m.•37 views

CVE-2018-6656

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

6.6AI score0.00501EPSS
SaveExploits1References2
CVE
CVE
•added 2018/02/06 2:00 p.m.•59 views

CVE-2018-6656

Summary: CVE-2018-6656 affects Z-BlogPHP 1.5.1 with a cross‑site request forgery (CSRF) vulnerability in zb_users/plugin/AppCentre/app_del.php. The vulnerability enables a remote attacker to trigger actions that delete files and directories under the user area, as described in CNVD-2018-05361 and...

6.5CVSS6.5AI score0.00501EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/06 12:00 a.m.•5 views

CVE-2018-6656: Cross-Site Request Forgery (CSRF)

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

6.5CVSS6.6AI score0.00501EPSS
SaveExploits1References2
Rows per page
Query Builder