CVE-2018-7737

概要

参考情報

• ponyma233/cms · Broken Link
• zblogcn/zblogphp · Third Party Advisory
• packetstormsecurity.com/files/147063/Z-Blog-1.5.1.1740-Full-Path-Disclosure.html · Exploit
• exploit-db.com/exploits/44407 · Exploit

z-blogphp のその他の脆弱性

• CVE-2024-55529緊急 9.8Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \zb_users\theme\shell\template.
• CVE-2024-39203中 6.1A cross-site scripting (XSS) vulnerability in the Backend Theme Management module of Z-BlogPHP v1.7.3 allows attackers to execute arbitrary …
• CVE-2022-40357緊急 9.8A security issue was discovered in Z-BlogPHP <= 1.7.2. A Server-Side Request Forgery (SSRF) vulnerability in the zb_users/plugin/UEditor/php…
• CVE-2020-29177緊急 9.1Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php.
• CVE-2020-29176高 7.8An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file.