CVE-2024-31396
Assigner: jpcert
Published: 2024-05-22T04:35:42.765Z
State: PUBLISHED
affected: vendor: appleple inc.
product: a-blog cms Ver.3.1.x series
versions: version: prior to Ver.3.1.12
status: affected
vendor: appleple inc.
product: a-blog cms Ver.3.0.x series
versions: version: prior to Ver.3.0.32
status: affected
descriptions: value: Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.
problemTypes: descriptions: description: Code injection
type: text