CVE-2017-17949

CVE-2017-17949 applies to Cells Blog 3.5. The vulnerability is a Cross-Site Scripting (XSS) flaw exploited via the pub_readpost.php fmid parameter. The connected sources confirm XSS in Cells Blog 3.5 and describe the vulnerability vector, without providing a specific patch/version, workarounds, o...

CVE-2017-17950

CVE-2017-17950 affects Cells Blog 3.5, where the pub_readpost.php ptid parameter enables SQL injection via user-supplied input. The vulnerability’s impact is described in multiple sources (e.g., NVD and CNVD) as allowing unauthorized access to data with partial to high severity. Exploitation deta...

CVE-2017-17948

Cells Blog 3.5 is affected by a Cross‑Site Scripting (XSS) vulnerability that can be triggered via the jfdname parameter in an act=showpic request. Multiple sources (NVD/NVD mirror, CNVD, Red Hat advisory, CNVD) corroborate the issue, describing XSS in Cells Blog 3.5 and the jfdname parameter pat...