CVE-2020-18268

MEDIUM 6.1CVE-2020-18268 · Published 07/06/2021 · updated 17/06/2026

In short

CVE-2020-18268 is a MEDIUM (CVSS 6.1) vulnerability affecting z-blogphp (zblogcn).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 85.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
z-blogphp zblogcn	`≤ 1.5.2`	No fix yet

Description

Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php."

References

zblogcn/zblogphp · Exploit
zblogcn/zblogphp · Exploit

More vulnerabilities in z-blogphp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free