Описание
zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability
Ссылки
- ExploitThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:zblogcn:z-blogphp:1.5:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.0025
Низкий
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
** DISPUTED ** zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability.
EPSS
Процентиль: 48%
0.0025
Низкий
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-20