Known Vulnerabilities for Z-blogphp by Zblogcn
Listed below are 10 of the newest known vulnerabilities associated with "Z-blogphp" by "Zblogcn".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-8747 json | A weakness has been identified in Z-BlogPHP 1.7.4.3430. This affects the function CheckComment of the file zb_system/function... | Not Provided | 2026-05-17 | 2026-05-18 |
| CVE-2022-40357 json | A security issue was discovered in Z-BlogPHP <= 1.7.2. A Server-Side Request Forgery (SSRF) vulnerability in the zb_users/plu... | 9.8 - CRITICAL | 2022-09-20 | 2022-09-22 |
| CVE-2020-29177 json | Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php. | 9.1 - CRITICAL | 2021-12-02 | 2021-12-04 |
| CVE-2020-29176 json | An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG ... | 7.8 - HIGH | 2021-12-02 | 2021-12-06 |
| CVE-2020-23352 json | Z-BlogPHP 1.6.0 Valyria is affected by incorrect access control. PHP loose comparison and a magic hash can be used to bypass ... | 7.5 - HIGH | 2021-01-27 | 2021-02-04 |
| CVE-2020-18268 json | Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" para... | 6.1 - MEDIUM | 2021-06-07 | 2021-06-15 |
| CVE-2018-19556 json | ** DISPUTED ** zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing.... | 4.3 - MEDIUM | 2018-11-26 | 2023-11-07 |
| CVE-2018-19463 json | ** DISPUTED ** zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows remote attackers to execute arbitrary PHP ... | 8.8 - HIGH | 2018-11-22 | 2023-11-07 |
| CVE-2018-18842 json | CSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 (Zero), which allows remote attackers to execut... | 8.8 - HIGH | 2018-10-30 | 2019-01-09 |
| CVE-2018-18381 json | Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type head... | 5.4 - MEDIUM | 2018-10-16 | 2019-09-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Zblogcn | Z-blogphp | 1.6.1 | |||
| Application | Zblogcn | Z-blogphp | 1.6.0 | |||
| Application | Zblogcn | Z-blogphp | 1.5.2.1935\(zero\) | |||
| Application | Zblogcn | Z-blogphp | 1.5.2.1935 | |||
| Application | Zblogcn | Z-blogphp | 1.5.2 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1626 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525-8 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525-7 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525-6 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525-5 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525-4 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525-3 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525-2 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525 | |||
| Application | Zblogcn | Z-blogphp | 1.5.0.1525 |