CVE-2015-6967

Mô tả

Tham khảo

• blog.curesec.com/article/blog/NibbleBlog-403-Code-Execution-47.html · Exploit
• blog.nibbleblog.com/post/nibbleblog-v4-0-5 · Exploit
• packetstormsecurity.com/files/133425/NibbleBlog-4.0.3-Shell-Upload.html · Exploit
• seclists.org/fulldisclosure/2015/Sep/5 · Exploit

Lỗ hổng khác của nibbleblog

• CVE-2020-23356CAO 7.5dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password…
• CVE-2019-7719NGHIÊM TRỌNG 9.8Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.ph…
• CVE-2018-16604CAO 7.2An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary PHP code by changing …
• CVE-2018-6470TRUNG BÌNH 5.3Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak.
• CVE-2015-6966TRUNG BÌNH 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of…