CVE-2018-6846

MEDIUM

Z-BlogPHP 1.5.1 - Path Disclosure via Direct Request to Upload Library

Title source: llm

Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zb_system/function/lib/upload.php.

Core 1

Core References

Issue Tracking, Third Party Advisory x_refsource_confirm

CVSS v3 5.3

EPSS 0.0147

EPSS Percentile 70.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-200

Status published

Products (1)

zblogcn/z-blogphp 1.5.1

Published Feb 08, 2018

Tracked Since Feb 18, 2026