CVE-2024-31396

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on...

CVE-2024-31396

Summary: CVE-2024-31396 is a code injection vulnerability in a-blog cms that affects the 3.1.x series prior to 3.1.12 and the 3.0.x series prior to 3.0.32. Affected versions permit an administrator-or-higher user who can log in to the product to execute arbitrary commands on the server. Root caus...