Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2023-40825

Disclosure Date: August 28, 2023 (last updated February 25, 2025)
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list.
Attacker Value
Unknown

CVE-2023-30333

Disclosure Date: May 18, 2023 (last updated February 25, 2025)
An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.
Attacker Value
Unknown

CVE-2023-29643

Disclosure Date: May 01, 2023 (last updated February 24, 2025)
Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function.
Attacker Value
Unknown

CVE-2023-27757

Disclosure Date: March 15, 2023 (last updated February 24, 2025)
An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file.