Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with editor or higher privilege who can login to the product may obtain arbitrary files on the server including password files.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
a-blog cms Ver.3.1.x series
Vendor
appleple inc.
Product
a-blog cms Ver.3.1.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.3.1.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Ver.3.1.9 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.3.0.x series
Vendor
appleple inc.
Product
a-blog cms Ver.3.0.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.3.0.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Ver.3.0.30 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.2.11.x series
Vendor
appleple inc.
Product
a-blog cms Ver.2.11.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.2.11.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Ver.2.11.59 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.2.10.x series
Vendor
appleple inc.
Product
a-blog cms Ver.2.10.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.2.10.x series · Scoped product and version facts