Approved changes feed: RSS · Atom
cpe:2.3:a:blog_project:blog:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Blog Project (cdf3d37c-06c2-51a0-a569-79f4c810c01b) |
|---|---|
| Product | Blog (4f9698ab-26f3-56ed-88c7-d372f813ebf3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/langhsu/mblog |
purl2cpe | 2026-06-01 10:10:55.751332 |
pkg:github/langhsu/mblog |
purl2cpe | 2026-06-01 10:10:55.751336 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23626 |
vulnerable | 2026-06-08 05:40:58.066727 |
Insufficient file checks in m1k1o/blog
HIGH (8.5)
m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Although PHP issued warnings and the upload function returned `false`, the original file (that could contain a malicious payload) was kept on the disk. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.
Published: 2022-02-08T22:00:12.000Z
Updated: 2025-04-22T18:22:30.382Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14346 |
vulnerable | 2026-06-08 05:08:49.768883 |
Details available
upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file.
Published: 2017-09-12T18:00:00.000Z
Updated: 2024-09-17T01:36:10.952Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14345 |
vulnerable | 2026-06-08 05:08:49.768483 |
Details available
SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.
Published: 2017-09-12T18:00:00.000Z
Updated: 2024-09-17T00:47:00.685Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.