CVE-2018-18842

CSRF exists in zbusers/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 Zero, which allows remote attackers to execute arbitrary PHP code...

CVE-2018-18842: Cross-Site Request Forgery (CSRF)

CSRF exists in zbusers/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 Zero, which allows remote attackers to execute arbitrary PHP code...

PT-2018-14687

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.5.2.1935 Description The issue allows remote attackers to execute arbitrary PHP code due to a CSRF vulnerability in the zb users/plugin/AppCentre/theme.js.php file. Recommendations For Z-BlogPHP version 1.5.2.1935, update t...