CNNVD-202512-5700 Information
Dec 31, 2025
cve
CNNVD ID
CNNVD-202512-5700
Related CVE
- CNNVD Published: 2025-12-31
Description (Chinese)
Simple-PHP-Blog是Philip Okugbe个人开发者的一个简单博客系统。 Simple-PHP-Blog存在代码注入漏洞，该漏洞源于对文件/login.php中参数Username的错误操作，可能导致跨站脚本攻击。
Description (English)
Simple-PHP-Blog is a simple blog system for Philip Okugbe’s personal developer. Simple-PHP-Blog has a code-injection loophole, which stems from an error on the parameter Username in the file/login.php, which could lead to a cross-site script attack.
Hazard Level
High
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2025-12-31
Last Modified
2026-02-24
References
https://gitee.com/sun-huizhi/dazhi/issues/IDBUOY https://vuldb.com/?ctiid.338608 https://vuldb.com/?id.338608 https://vuldb.com/?submit.710150
Share on: