CVE-2024-31396
EUVD-2024-2929122.05.2024, 05:15
Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| appleple | a-blog_cms | 3.0.0 ≤ 𝑥 < 3.0.32 |
| appleple | a-blog_cms | 3.1.0 ≤ 𝑥 < 3.1.12 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| appleple | a-blog_cms | 3.1.0 ≤ 𝑥 < 3.1.12 | ADP |
| appleple | a-blog_cms | 3.0.0 ≤ 𝑥 < 3.0.32 | ADP |