A Blog Cms Ver.3.0.X Series
Approved changes feed: RSS · Atom
cpe:2.3:a:appleple_inc.:a-blog_cms_ver.3.0.x_series:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Appleple Inc. (b95fa5d4-cbca-50e1-8fc2-c7aaf5e8cdf3) |
|---|---|
| Product | A Blog Cms Ver.3.0.X Series (9ef73d6d-acb8-5fd3-b361-2e52f719f8f7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-31396 |
vulnerable | 2026-06-08 06:35:31.432540 |
Details available
Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.
Published: 2024-05-22T04:35:42.765Z
Updated: 2024-08-02T01:52:56.923Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31395 |
vulnerable | 2026-06-08 06:35:31.427908 |
Details available
Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with an editor or higher privilege who can log in to the product may execute an arbitrary script on the web browser of the user who accessed the schedule management page.
Published: 2024-05-22T04:35:37.216Z
Updated: 2024-10-31T14:53:49.233Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31394 |
vulnerable | 2026-06-08 06:35:31.427090 |
Details available
Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with an editor or higher privilege who can log in to the product may obtain arbitrary files on the server.
Published: 2024-05-22T04:35:31.768Z
Updated: 2025-03-27T15:03:43.986Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30420 |
vulnerable | 2026-06-08 06:35:30.320683 |
Details available
Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may obtain arbitrary files on the server and information on the internal server that is not disclosed to the public.
Published: 2024-05-22T04:35:26.240Z
Updated: 2024-08-19T19:36:17.408Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30419 |
vulnerable | 2026-06-08 06:35:30.318072 |
Details available
Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with a contributor or higher privilege who can log in to the product may execute an arbitrary script on the web browser of the user who accessed the website using the product.
Published: 2024-05-22T04:35:09.652Z
Updated: 2024-08-02T01:32:07.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27279 |
vulnerable | 2026-06-08 06:31:28.404748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23782 |
vulnerable | 2026-06-08 06:29:40.427197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23348 |
vulnerable | 2026-06-08 06:29:37.339431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23183 |
vulnerable | 2026-06-08 06:29:36.995021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23182 |
vulnerable | 2026-06-08 06:29:36.994303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23181 |
vulnerable | 2026-06-08 06:29:36.993411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23180 |
vulnerable | 2026-06-08 06:29:36.989782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.