EUVD-2018-10452

Malware in sbrugna...

EUVD-2018-10451

Malware in sbrugna...

Catfish Blog suffers from a file upload vulnerability (CNVD-2021-49553)

Catfish Blog is an open source free PHP blog. Catfish Blog has a file upload vulnerability that can be exploited by an attacker to upload a webshell and gain server privileges...

Catfish Blog suffers from a file upload vulnerability (CNVD-2021-49554)

Catfish Blog is an open source free PHP blog. Catfish Blog has a file upload vulnerability that can be exploited by an attacker to upload a webshell and gain server privileges...

Catfish Blog V3.9.0 File Upload Vulnerability in Backend

Catfish Blog is an open source free PHP blog. A file upload vulnerability exists in the backend of Catfish Blog V3.9.0, which can be exploited by an attacker to gain control of the server...

File upload vulnerability in Catfish Blog V3.9.0 backend (CNVD-2021-37306)

Catfish Blog is an open source free PHP blog. A file upload vulnerability exists in the backend of Catfish Blog V3.9.0, which can be exploited by an attacker to gain control of the server...

Arbitrary File Deletion Vulnerability in Catfish Blog

Catfish Blog is a free personal blogging system. Catfish Blog suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files on the operating system...

Catfish Blog has a file upload vulnerability

Catfish Blog is a free personal blogging system. A file upload vulnerability exists in Catfish Blog, which can be exploited by an attacker to upload malicious files and gain administrative privileges on the site...

Catfish Blog v2.1.9 suffers from a file upload vulnerability

Catfish Blog is a specialized system for building blogs. A file upload vulnerability exists in Catfish Blog v2.1.9, which can be exploited by an attacker to gain control of the web server...

CVE-2018-18735

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

CVE-2018-18735

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

CVE-2018-18736

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."...

CVE-2018-18736

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."...

Cross site request forgery (csrf)

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

Cross site scripting

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."...

catfish blog cross-site scripting vulnerability

Catfish blog is a set of open source blog system developed using the PHP language . A cross-site scripting vulnerability exists in Catfish blog version 2.0.33. A remote attacker can exploit this vulnerability to inject code...

catfish blog cross-site request forgery vulnerability

Catfish blog is a set of open source blog system developed using the PHP language . A cross-site request forgery vulnerability exists in admin/Index/tiquan in Catfish blog version 2.0.33. A remote attacker can exploit this vulnerability to change the user type...

CVE-2018-18736

CVE-2018-18736 corresponds to an XSS vulnerability in catfish blog 2.0.33 (described as related to “write source code”). Affected component: catfish blog (version 2.0.33). Root cause details are not fully specified in the provided documents beyond the XSS note. Potential impact is cross-site scri...

CVE-2018-18735

CVE-2018-18735 describes a cross-site request forgery in Catfish Blog 2.0.33, specifically in the admin/Index/tiquan functionality. The CVE entry notes a CSRF vulnerability that could allow an attacker to affect user roles (e.g., change user type) given the documented access path. From the initia...

CVE-2018-18736

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."...