medium6.5
CVE-2018-6656
Z-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_del.php, as demonstrated by deleting files and directories.
Impact
Z-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_del.php, as demonstrated by deleting files and directories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zblogcn | Z-Blogphp | Version 1.5.1 |