Lucene search
K

8 matches found

Nuclei
Nuclei
added yesterday62 views

Z-Blog <=1.5.2 - Open Redirect

Z-Blog 1.5.2 and earlier contains an open redirect vulnerability via the redirect parameter in zbsystem/cmd.php. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-18268 info: name: Z-Blo...

6.1CVSS6.3AI score0.02687EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-16075

Malware in sbrugna...

6.1CVSS6.3AI score0.00425EPSS
Exploits1References2
OSV
OSV
added 2023/04/04 3:15 p.m.2 views

CVE-2020-23327

Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model...

6.1CVSS6AI score0.00425EPSS
Exploits1References1
NVD
NVD
added 2023/04/04 3:15 p.m.12 views

CVE-2020-23327

Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model...

6.1CVSS6.3AI score0.00425EPSS
Exploits1References1
Prion
Prion
added 2023/04/04 3:15 p.m.17 views

Cross site scripting

Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model...

5.8CVSS6.2AI score0.00425EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/04 12:0 a.m.4 views

CVE-2020-23327

Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model...

7AI score0.00425EPSS
Exploits1References1
CVE
CVE
added 2023/04/04 12:0 a.m.40 views

CVE-2020-23327

ZblogPHP v1.0 has a Cross-Site Scripting vulnerability in the title parameter of the module management model that could let a local attacker execute arbitrary code. Root cause: improper handling of the title input in ZblogPHP 1.0. Impact is described as local code execution with a low-to-moderate...

6.1CVSS6.2AI score0.00425EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/04/04 12:0 a.m.17 views

CVE-2020-23327

Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model...

6.3AI score0.00425EPSS
Exploits1References1
Rows per page
Query Builder