CVE-2019-6034

MEDIUM 6.1CVE-2019-6034 · Published 26/12/2019 · updated 17/06/2026

In short

CVE-2019-6034 is a MEDIUM (CVSS 6.1) vulnerability affecting a-blog cms (appleple).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.4% of all vulnerabilities.
Fix: update to 2.10.23, 2.8.64, 2.9.6 or later.

Package	Affected versions	Patched versions
a-blog cms appleple	`≥ 2.10.0, < 2.10.23≥ 2.8.0, < 2.8.64≥ 2.9.0, < 2.9.6`	`2.10.232.8.642.9.6`

Description

a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.

References

jvn.jp/en/jp/JVN10377257/index.html · Third Party Advisory
developer.a-blogcms.jp/download/legacy.html · Vendor Advisory

More vulnerabilities in a-blog cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

a-blog cms

appleple

≥ 2.10.0, < 2.10.23≥ 2.8.0, < 2.8.64≥ 2.9.0, < 2.9.6

2.10.232.8.642.9.6

More vulnerabilities in a-blog cms

See all →