NetSight
medium6.1

CVE-2019-6034

a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the contex…

Impact

a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.

Affected products

VendorProductAffected versions
ApplepleA-Blog Cms
from 2.8.0 before 2.8.64
from 2.9.0 before 2.9.6
from 2.10.0 before 2.10.23

Weakness classification

References