high8.8
CVE-2018-8893
Z-BlogPHP 1.5.1 Zero has CSRF in plugin_edit.php, resulting in the ability to execute arbitrary PHP code.
Impact
Z-BlogPHP 1.5.1 Zero has CSRF in plugin_edit.php, resulting in the ability to execute arbitrary PHP code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zblogcn | Z-Blogphp | Version 1.5.1 |