PT-2021-10884

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.6.0 Valyria Description The issue is related to incorrect access control in Z-BlogPHP. It is possible to bypass authentication using PHP loose comparison and a magic hash. The passwordvisit input password function in zb...

Z-BlogPHP 安全漏洞

Z-BlogPHP is an open source PHP-based blogging system for the Z-blog community. A security vulnerability exists in Z-BlogPHP version 1.6.0, which stems from the passwordvisitinputpassword function in zbuser/plugin/passwordvisit/include.php that uses loose comparisons for authentication, which...