4 matches found
CVE-2017-17794
validateformpreferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field...
CVE-2017-17794
validateformpreferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field...
PT-2017-15000
Name of the Vulnerable Software and Affected Versions BlogoText versions through 3.7.6 Description The issue allows attackers to bypass intended access restrictions via vectors related to an e-mail address field in the validate form preferences function in admin/preferences.php. Recommendations F...
BlogoText 'validate_form_preferences' function access restriction bypass vulnerability
BlogoText is a lightweight SQLite blogging engine. An access restriction bypass vulnerability exists in the 'validateformpreferences' function in the admin/preferences.php file in BlogoText 3.7.6 and earlier versions. An attacker can exploit this vulnerability to bypass access restrictions...