Approved changes feed: RSS · Atom
cpe:2.3:a:m1k1o:blog:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | M1K1O (fdb9f378-0678-5916-abba-94c551db1ff4) |
|---|---|
| Product | Blog (e61bef8c-b4f6-5413-81b2-5b943f98c23f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23626 |
vulnerable | 2026-06-08 05:40:58.065735 |
Insufficient file checks in m1k1o/blog
HIGH (8.5)
m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Although PHP issued warnings and the upload function returned `false`, the original file (that could contain a malicious payload) was kept on the disk. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.
Published: 2022-02-08T22:00:12.000Z
Updated: 2025-04-22T18:22:30.382Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.