CVE-2018-19556

MEDIUM

Z-BlogPHP 1.5 - Content Spoofing via File Preview Mishandling

Title source: llm
STIX 2.1

Description

zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability

References (2)

Core 2
Core References
Third Party Advisory x_refsource_confirm
https://github.com/zblogcn/zblogphp/issues/205

Scores

CVSS v3 4.3
EPSS 0.0101
EPSS Percentile 59.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-20
Status published
Products (1)
zblogcn/z-blogphp 1.5
Published Nov 26, 2018
Tracked Since Feb 18, 2026