Vulnerabilities > Appleple

DATE CVE VULNERABILITY TITLE RISK
2019-12-26 CVE-2019-6034 Injection vulnerability in Appleple A-Blog CMS
a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.
network
low complexity
appleple CWE-74
6.1
2019-12-26 CVE-2019-6033 Cross-site Scripting vulnerability in Appleple A-Blog CMS
Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
appleple CWE-79
6.1
2017-04-12 CVE-2016-1179 Cross-site Scripting vulnerability in Appleple A-Blog CMS
Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML.
network
low complexity
appleple CWE-79
6.1
2017-04-12 CVE-2016-1178 Improper Access Control vulnerability in Appleple A-Blog CMS
The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors.
network
low complexity
appleple CWE-284
6.5