Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
a-blog cms (Ver.3.1.x series)
Vendor
appleple inc.
Product
a-blog cms (Ver.3.1.x series)
Platforms
Unknown
Default status
Unknown
a-blog cms (Ver.3.1.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.3.1.37
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms (Ver.3.0.x series)
Vendor
appleple inc.
Product
a-blog cms (Ver.3.0.x series)
Platforms
Unknown
Default status
Unknown
a-blog cms (Ver.3.0.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.3.0.41
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms (Ver.2.11.x series)
Vendor
appleple inc.
Product
a-blog cms (Ver.2.11.x series)
Platforms
Unknown
Default status
Unknown
a-blog cms (Ver.2.11.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.2.11.70
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms (Ver.2.10.x series)
Vendor
appleple inc.
Product
a-blog cms (Ver.2.10.x series)
Platforms
Unknown
Default status
Unknown
a-blog cms (Ver.2.10.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.2.10.58
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms (Ver.2.9.x series)
Vendor
appleple inc.
Product
a-blog cms (Ver.2.9.x series)
Platforms
Unknown
Default status
Unknown
a-blog cms (Ver.2.9.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.2.9.46
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms (Ver. 2.8.x series)
Vendor
appleple inc.
Product
a-blog cms (Ver. 2.8.x series)
Platforms
Unknown
Default status
Unknown
a-blog cms (Ver. 2.8.x series) · Scoped product and version facts