Vulnerability Description
In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.php. NOTE: the software maintainer disputes that this is a vulnerability
CVSS Score
5.3
MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zblogcn | Z-Blogphp | 1.5.1.1740 |
Related Weaknesses (CWE)
References
- https://github.com/ponyma233/cms/blob/master/Z-Blog_1.5.1.1740_bugs.md#web-site-Broken LinkThird Party Advisory
- https://github.com/zblogcn/zblogphp/issues/205Third Party Advisory
- https://packetstormsecurity.com/files/147063/Z-Blog-1.5.1.1740-Full-Path-DisclosExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/44407/ExploitThird Party AdvisoryVDB Entry
- https://github.com/ponyma233/cms/blob/master/Z-Blog_1.5.1.1740_bugs.md#web-site-Broken LinkThird Party Advisory
- https://github.com/zblogcn/zblogphp/issues/205Third Party Advisory
- https://packetstormsecurity.com/files/147063/Z-Blog-1.5.1.1740-Full-Path-DisclosExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/44407/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2018-7737?
CVE-2018-7737 is a vulnerability with a CVSS score of 5.3 (MEDIUM). In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.php. NOTE: the software maintainer disputes that this is a vulnerability
How severe is CVE-2018-7737?
CVE-2018-7737 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7737?
Check the references section above for vendor advisories and patch information. Affected products include: Zblogcn Z-Blogphp.