Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with an editor or higher privilege who can log in to the product may obtain arbitrary files on the server.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
a-blog cms Ver.3.1.x series
Vendor
appleple inc.
Product
a-blog cms Ver.3.1.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.3.1.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.3.1.12
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.3.0.x series
Vendor
appleple inc.
Product
a-blog cms Ver.3.0.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.3.0.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.3.0.32
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.2.11.x series
Vendor
appleple inc.
Product
a-blog cms Ver.2.11.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.2.11.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.2.11.61
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.2.10.x series
Vendor
appleple inc.
Product
a-blog cms Ver.2.10.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.2.10.x series · Scoped product and version facts