CVE-2020-21052

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function...

PT-2023-11572

Name of the Vulnerable Software and Affected Versions zrlog version 2.1.3 Description The issue allows a remote attacker to execute arbitrary code via the nickame parameter of the "/post/addComment" API endpoint. This enables the attacker to perform actions such as injecting malicious scripts...

CVE-2020-21052

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function...

ZrLog 跨站脚本漏洞

ZrLog is a blogging system developed using the Java language. A cross-site scripting XSS vulnerability exists in ZrLog version 2.1.3. An attacker can exploit this vulnerability to execute arbitrary code via the nickname parameter of the /post/addComment function...

CVE-2020-18066

Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...

ZrLog 跨站脚本漏洞

ZrLog is a blog/CMS program developed in Java that is minimalist, easy to use, componentized, and has a low memory footprint. A cross-site scripting vulnerability exists in ZrLog version 2.1.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the userName and email...

CVE-2020-18066: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...

PT-2021-10123

Name of the Vulnerable Software and Affected Versions: ZrLog version 2.1.0 Description: A Cross Site Scripting issue exists, allowing potential exploitation through the userName and email parameters in the "post/addComment" endpoint. Recommendations: For ZrLog version 2.1.0, consider restricting...