Products

a-blog cms

• 3.1.0 - 3.1.11

• 3.0.0 - 3.0.31

Source

vultures@jpcert.or.jp

Published : May 22, 2024, 5:15 a.m.
Last Modified : May 22, 2024, 12:46 p.m.

Description

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.

References

URL	Source
https://developer.a-blogcms.jp/blog/news/JVN-70977403.html	vultures@jpcert.or.jp
https://jvn.jp/en/jp/JVN70977403/	vultures@jpcert.or.jp